Change ALL the passwords

from here

No, literally, ALL Yahoo passwords need to be changed. If you had an account with them in 2013, your account was compromised because ALL 3 billion Yahoo accounts were compromised then.