The Securities and Exchange Commission is investigating whether Yahoo waited too long to tell investors that it suffered two massive data breaches. Yahoo reported in September 2016 that hackers stole information associated with 500 million accounts; that theft occurred in late 2014. Last month, Yahoo disclosed that a separate data breach affected 1 billion users; that data breach occurred in 2013.