Yahoo has revealed that 32 million user accounts were accessed by hackers in the last two years using a sophisticated cookie forging attack without any password. The cookie caper is likely linked to the “same state-sponsored actor” thought to be behind a separate, 2014 data breach that resulted in the theft of 500 Million user accounts. Yahoo CEO Marissa Mayer said she would forgo her annual bonus, which is US$2 Million, and any 2017 equity award, in response to the security incidents occurred during her tenure.
Source: https://thehackernews.com/2017/03/yahoo-cookie-forging-hack.html