Yahoo! Inc. confirmed Thursday that as many as 500 million accounts have had user information hacked off the network in late 2014.

A recent investigation by the company revealed the data stolen include names, email addresses, phone numbers, dates of birth, hashed passwords and some security questions and answers.

The investigation indicated that stolen information did not include unprotected passwords, payment card data or bank account information.

Yahoo is working with law enforcement to investigate the matter. The company is also notifying potentially affected users and securing their accounts.

Yahoo recommends that users who have not changed their password since 2014 should do so, and recommends to monitor all accounts with similar information for suspicious activity.

Additional information will become available on the Yahoo Security Issue FAQs page here.