The class-action lawsuit came on the heels of two major breaches from 2014 and 2016 and reportedly impacted more than 3 billion users. The judge rejected the proposal because Yahoo did not disclose the cost of the credit monitoring services or the size of the settlement pool. Yahoo did not report the scope of the breaches until July 2016.