The smallest thing about the Yahoo mega-breach is the fine
https://nakedsecurity.sophos.com/2018/04/26/yahoo-fined-35m-for-staying-quiet-about-mega-breach/