In September, Yahoo revealed a hack that compromised 500 million user accounts. Wednesday, the company revealed yet another hack, this time affecting a record 1 billion accounts.
And yours might be among them.
The hack exposed names, email addresses, telephone numbers, dates of birth, encrypted passwords and unencrypted security questions. Here’s how you can tell if hackers swiped your account information.
Log into your Yahoo account
This might sound obvious, but if you’re like a lot of people, you might not use Yahoo Mail as your primary email account. Yahoo has 1 billion monthly active users on its services overall and just 225 million monthly active users for its Yahoo Mail service.
So check the email with your Yahoo account if you haven’t already. Yahoo started sending out notifications to users, and you should be receiving one at that account if you were affected by the data breach.
Change your password
If you haven’t changed your password in a few years, do it — now. The company says the passwords that hackers stole were encrypted — scrambled up with a tool called bcrypt. This kind of encryption can potentially be broken with enough persistence, said Brett McDowell, executive director of the FIDO Alliance, a nonprofit group that vets login systems.