Just when you thought it couldn’t get worse: Yahoo gave new meaning to the exclamation point that has long punctuated its name.

On Monday, we all heard that Equifax revised the number of people affected by the recent data breach to about 145 million. That sounded like a lot–it seems most people had forgotten that the Yahoo breach from 2013 affected one billion people. Now, on Tuesday, it was revealed that the Yahoo breach was actually closer to three billion people. Sorry, Verizon.

This past year, Verizon was in the process of purchasing Yahoo, when earlier findings of the hack surfaced. Verizon eventually settled on a price cut of $350 million from the original offer. From a negotiating standpoint, it’s unfortunate that the full details of the breach were not revealed earlier.

As Nicole Perlroth reports in the New York Times, the data heist included names, birth dates, phone numbers and passwords of users that were encrypted with security that was easy to crack. Also snagged: security questions and alternate email addresses, which would make it helpful to hack into other accounts for the same user.

Read the full story in the New York Times.