Yahoo ‘state’ hackers stole data from 500 million users