Yahoo eventually decided to inform its service users about the size of the latest violations and leaks.
The first hack apparently took place in August 2013 and leaked names, email addresses, phone numbers, dates of birth, hashed passwords (with MD5) and in some cases, encrypted or unencrypted questions and answers security.
Simple text access codes and credit card payment information are not reported by the company.
Yahoo says in the updated warning that it has notified affected users and that it "has taken steps to secure accounts by requiring users to change their codeof their access.”
And yes, Yahoo has admitted that the above hack is different from theirs infringement and leakage of 500 million accounts which was revealed in September of this year.
However, the company inclpays that those responsible are the same hackers who carried out the first breach.
If you are one of those who still have Yahoo accounts, change your password directly, or subscribe to company authentication service.
More information in the official announcement: