Yahoo is warning customers that hackers may have been able to break into their accounts without even stealing their passwords. The attack, which has been attributed to the same “state-sponsored” hackers that were blamed for breaking into over a billion Yahoo accounts last year – the biggest hack in history – was effective between 2015 and 2016.