Yahoo warns users at least 500 million accounts were hacked - CNET

Users who haven't changed their passwords since 2014 are highly encouraged to do so.