Breachesby GlyphYahoo!
Disclosed Sep 22, 2016515,000 affectedSettled
2014 Yahoo breach hit 515,000 UK accounts; ICO fine of GBP 250,000
The 2014 Yahoo breach, disclosed publicly in September 2016, affected about 500 million accounts including more than 515,000 UK accounts controlled by Yahoo UK Services. The ICO fined it GBP 250,000 under the Data Protection Act 1998 for security and oversight failures.
What is known
| People affected | 515,000 (as reported by the organization) |
|---|---|
| Disclosed | Sep 22, 2016 |
| Happened | Aug 13, 2016 |
| Attack | Hacking |
| Data exposed | NamesEmailsPhone numbersDates of birthPasswordsOtherAddresses |
| Sector | Tech · US |
| Status | Settled |
| Lawsuit or fine | GBP 250,000 ICO fine (June 2018); USD 35M SEC penalty on Altaba (2018) (about $334K) |
Sources
California Attorney General breach notice: Yahoo!Yahoo 8-K Ex. 99.1 (September 22, 2016)Yahoo 8-K Ex. 99.1 (December 14, 2016)Altaba, Formerly Known as Yahoo!, Charged With Failing to Disclose Massive Cybersecurity Breach; Agrees To Pay $35 MillionYahoo data breaches (Wikipedia)UK watchdog issues $330k fine for Yahoo's 2014 data breachMaine Attorney General breach notice archive: Yahoo
Notices filed
Other breaches at Yahoo!
History of this record
["names","emails","phone","dob","passwords","other"] to ["names","emails","phone","dob","passwords","other","addresses"]by backfillSource
empty to 2016-08-13by backfillSource
empty to https://www.maine.gov/ag/sites/maine.gov.ag/files/docs/Data%20breach%20spreadsheet%208-1-2021%20through%2012-5-2018%20REDACTED.xlsxby backfillSource
35000000 to 334000by seedSource
$35M SEC penalty for failure to disclose (2018) to GBP 250,000 ICO fine (June 2018); USD 35M SEC penalty on Altaba (2018)by seedSource
500000000 to 515000by seedSource
Yahoo confirmed that information associated with at least 500 million user accounts, including names, emails, phone numbers, birth dates, hashed passwords and some security questions, was stolen in late 2014 by what it believed was a state- to The 2014 Yahoo breach, disclosed publicly in September 2016, affected about 500 million accounts including more than 515,000 UK accounts controlled by Yahoo UK Services. The ICO fined it GBP 250,000 under the Data Protection Act 1998 for seby seedSource
State-sponsored actor stole data tied to 500 million Yahoo accounts in 2014 to 2014 Yahoo breach hit 515,000 UK accounts; ICO fine of GBP 250,000by seedSource
confirmed to settledby seedSource
empty to 35000000by seedSource
empty to $35M SEC penalty for failure to disclose (2018)by seedSource
1000000000 to 500000000by seedSource
Yahoo disclosed that an unauthorized third party stole data associated with more than one billion user accounts in August 2013, including names, emails, phone numbers, birth dates, MD5-hashed passwords and some security questions. The figur to Yahoo confirmed that information associated with at least 500 million user accounts, including names, emails, phone numbers, birth dates, hashed passwords and some security questions, was stolen in late 2014 by what it believed was a state-by seedSource
August 2013 theft of data from more than one billion Yahoo accounts to State-sponsored actor stole data tied to 500 million Yahoo accounts in 2014by seedSource
other to techby seedSource
unknown to hackingby seedSource
[] to ["names","emails","phone","dob","passwords","other"]by seedSource
empty to organizationby seedSource
empty to 1000000000by seedSource
empty to Yahoo disclosed that an unauthorized third party stole data associated with more than one billion user accounts in August 2013, including names, emails, phone numbers, birth dates, MD5-hashed passwords and some security questions. The figurby seedSource
empty to August 2013 theft of data from more than one billion Yahoo accountsby seedSource
2016-12-14 to 2016-09-22by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.