The U.K.’s data protection regulator has fined Yahoo’s U.K. division £250,000 (U.S. $331,203) following a cyber-attack in November 2014 that placed the personal information of over 500 million users at risk.
The Information Commissioner’s Office (ICO) also slammed the company for its decision to keep news of the attack secret for nearly two years, only disclosing it publicly in September 2016.

