Attack on Yahoo hit 500 million users