Hackers stole user data from more than one billion Yahoo accounts, the company confirmed Wednesday.
Yahoo said an “unauthorized third party” hacked these accounts in August 2013 and is “likely distinct” from the hack the company disclosed back in September that affected 500 million accounts. That said, Yahoo believes the two separate hacks could have perpetrated by the same actor.
“The company has connected some of this activity to the same state-sponsored actor believed to be responsible for the data theft the company disclosed on September 22, 2016,” Yahoo spokesperson Suzanne Philion said in a statement announcing the hack.
Yahoo said the security breach may have included names, email addresses, telephone numbers, dates of birth, hashed passwords and, possibly, encrypted or unencrypted security questions and answers.
The company added that it didn’t believe bank account information or payment card data were compromised in the hack. Yahoo said it was also notifying affected users to better secure their accounts by changing their passwords.