Yahoo announced on Sept. 22 that it was hacked in 2014 and "at least 500 million user accounts" were stolen. The announcement states that the hack was done by a "state-sponsored actor" and that account information stolen could include "names,email addresses, telephone numbers, or date of birth,hashed passwords (the huge majority with bcrypt), and in some cases, or encrypted or encrypted security answers and questions." In short,change your password good now and don't accomplish it something easy to guess. If you were affected, Yahoo will let you know and ask you to change your password and "security questions and answers."This isn't the first hack to ever happen, and which is why using a password manager and not using the same password is so important.
Source: popsugar.com