Yahoo tells users they were hit with cookie attack - CNET

And it hasn't even offered them milk. Yahoo revealed the attack in December, but it was buried by news of its 2013 security breach -- the biggest one on record.