That's three billion accounts -- two million more than the number Yahoo disclosed when it reported the hack in August 2013. It includes Yahoo email accounts as well as Flickr, Fantasy and Tumblr.
Names, email addresses and passwords, were breached, but financial info was not, said Verizon, which acquired Yahoo's core internet assets four months ago for $4.48 billion.
Verizon said it obtained "new intelligence" regarding the hack after getting help from outside forensic experts.
“Verizon is committed to the highest standards of accountability and transparency, and we proactively work to ensure the safety and security of our users and networks in an evolving landscape of online threats,” Chandra McMahon, Verizon's chief information security officer, said in a press release. “Our investment in Yahoo is allowing that team to continue to take significant steps to enhance their security, as well as benefit from Verizon’s experience and resources.”
The two million users affected the hack not informed four years ago will receive notifications the next several days, Verizon said.
Click here to follow Daily Voice Armonk and receive free news updates.