The SEC is investigating whether Yahoo Inc.’s two massive data breaches should have been reported sooner to investors, confirms CNBC News , in what could prove to be a landmark test in defining when a company is required to disclose a hack. Yahoo has faced questions about precisely when it knew about a 2014 cyber attack it announced back in September that exposed the e-mail credentials of roughly 500 million accounts.