In Yahoo’s case  the company confirmed two years after the fact that users were affected by a state-sponsored actor who was able to infiltrate their network and that they are working with law enforcement