Uh oh. Yahoo confirmed that, in 2014, hackers stole information on at least 500 million users. It’s one of the biggest data breaches in history – possibly the biggest. According to sources who spoke to Recode before Yahoo officially confirmed the hack, the company is prepping for an inevitable law-enforcement investigation and, quite possibly, lawsuits. But one of the biggest concerns for Yahoo is that that this news has come at a particularly inopportune moment: Verizon is currently in the process of acquiring the company for $4.83 billion, and news of the data breach could affect the telco’s valuation of the company. One troublesome note: Yahoo apparently didn’t tell Verizon about the hack, despite having known about it for almost two months. In August, Vice’s Motherboard reported on a Russian cybercriminal named “Peace” who claimed to be selling credentials from 200 million-plus Yahoo users, including usernames, easily-decrypted passwords, and personal info. But Yahoo had never confirmed the report, saying only that it was investigating its legitimacy. It’s safe to say that its legitimacy has been confirmed.