Today Yahoo! announced that their systems had been compromised and personally identifying user information (including names, e-mail addresses, telephone numbers, dates of birth and answers to security questions) had been stolen.
Nasty.
But the truly galling bit?
Law enforcement provided Yahoo in November 2016 with data files that a third party claimed was Yahoo user data. We analyzed this data with the assistance of outside forensic experts and found that it appears to be Yahoo user data. Based on further analysis of this data by the forensic experts, we believe an unauthorized third party, in August 2013, stole data.
Emphasis mine. This data was stolen in August 2013 and it took 3 years and an outside party to make Y! aware of it?!
I have stuff growing on my shower curtain that could do a better job of security.