SUNNYVALE (CBS SF) — Yahoo admitted Tuesday that a security breach in 2013 affected all three billion accounts, triple the number originally reported.
Last year, the Sunnyvale-based internet company said one billion user accounts were impacted.
According to a statement by Verizon, which acquired Yahoo earlier this year, “the company recently obtained new intelligence and now believes, following an investigation with the assistance of outside forensic experts, that all Yahoo user accounts were affected by the August 2013 theft.”
Yahoo said in Tuesday’s statement that stolen information did not include passwords in clear text, payment card data or bank account information. At the time of the previous disclosure, Yahoo said stolen information may have included names, email address, phone numbers and birth dates, along with security questions and answers.
The company said it is “continuing to work closely” with law enforcement.
Yahoo said it would notify the additional affected user accounts.
A separate hack of Yahoo in 2014 impacted at least 500 million users. In that breach, the company said email addresses, birth dates, answers to security questions and other personal information may have been stolen.
Earlier this year, the Department of Justice indicted two Russian intelligence agents and two hackers in connection with the 2014 breach.