Yahoo said it appears separate from a breach disclosed in September, when it revealed some 500 million accounts were accessed in 2014.
The company said names, phone numbers, passwords and email addresses were stolen, but not bank and payment data.
Yahoo, which is being taken over by Verizon, said it is working closely with the police and authorities.
When Yahoo disclosed in September the 2014 data breach, the internet giant said information had been “stolen by what we believe is a state-sponsored actor”. Yahoo did not say which country it held responsible.
The 2014 breach included swathes of personal information, including names and emails, as well as “unencrypted security questions and answers”.
Yahoo has come under pressure to disclose why it took so long for the breach to be made public.
The new breach raises fresh questions about Verizon’s $4.8 billion proposed acquisition of Yahoo, and whether the US mobile carrier will try to modify or abandon its bid.
If the hacks cause a user backlash against Yahoo, the company’s services would not be as valuable to Verizon.
In a statement, Verizon said that it would evaluate the situation as Yahoo investigates and would review the “new development before reaching any final conclusions”.
On December 14, Yahoo said that users should change their passwords and security questions.
At least 158 people have died in Spain's worst flooding disaster in generations. On October…
Google has been fined two undecillion (a two followed by 36 zeroes) roubles by a…
Embarking on a home remodel is an exciting journey, promising enhanced comfort, increased property value,…
The US presidential candidates continued to campaign across key swing states on October 20. Footage…
Elon Musk has said he will give away $1 million a day to a registered…
India and Canada have decided to expel their top envoys along with other diplomats as…