The number of affected accounts was double the number implicated in a 2014 breach that the internet company disclosed in September.