This company could explode with major problems and major losses.” In the 2013 incident, Yahoo said that credit card and bank account numbers, which are stored separately, were not affected, but the breach did include some unencrypted “security questions” that the company uses to authenticate users.