The recently disclosed Yahoo breach left at least 500 million accounts compromised after an alleged state-sponsored attack two years ago.