In August we heard about a hacker claiming to be selling the credentials of 200 million Yahoo accounts, and
Yahoo said it is investigating the hacker's claim. [webmasterworld.com]
According to reports from people familiar with the matter,
Yahoo is preparing to disclose the extent of the hack. [recode.net]
Not good timing for this just when Yahoo is going through the acquisition.
Either way, it won't be a bad idea for you to have changed your Yahoo passwords, and if you used the same password elsewhere, you ought to change that, too.