Law enforcement provided Yahoo in November 2016 with data files that a third party claimed was Yahoo user data. We analyzed this data with the assistance of outside forensic experts and found that it appears to be Yahoo user data. Based on further analysis of this data by the forensic experts, we believe an unauthorized third party, in August 2013, stole data associated with more than one billion user accounts. Yahoo has not been able to identify the intrusion associated with this theft. We believe this incident is likely distinct from the incident we disclosed on September 22, 2016. We are notifying potentially affected users and have taken steps to secure their accounts, including requiring users to change their passwords. Yahoo has also invalidated unencrypted security questions and answers so that they cannot be used to access an account.
Yahoo says more than one billion accounts got hacked. That's obviously terabytes of data.
My question is, how can we secure website user information from hackers? Yahoo uses top level security, yet hackers managed to hack them. They are obviously using hashes and several encryption methods, but how did hackers breach their systems?
Are we all at risk?
Are the current security solutions not enough to prevent an attack? Need answers from penetration testers and security professionals.