News & Resources

Password manager LastPass announced Wednesday it had suffered its second data breach in three months.

CEO Karim Toubba said the company recently detected unusual ...

Cybersecurity experts are expressing concern over the latest data breach suffered by password manager LastPass, as the cloud security company remains mum in the face of a class-action lawsuit linked to multiple hacks on the firm last year.

LastPass first alerted customers in August 2022 that "an unauthorized party gained ...

The Catastrophic LastPass Breach Was Even Worse Than It Seemed

In December, the password-manager maker LastPass revealed that an August breach it had disclosed at the end of November was worse than the company originally thought, compromising encrypted copies of some users’ password vaults, on top of other personal information. Now, the company has disclosed a second incident that began in mid-August and allowed attackers to rampage ...

LastPass is, once again, telling customers about a security incident related to the August 2022 breach of its development environment and subsequent unauthorized access to the company’s third-party cloud storage service that hosted backups: “The threat actor leveraged information stolen during the first incident, information available from a third-party data breach, and a vulnerability in a third-party media software package ... 

LastPass has, for the longest time, been one of the big names when it comes to password managers. Unfortunately, with a registered user base of over 25 million, it's also a big target for cybercriminals. Indeed, LastPass has quite the history of security incidents stretching back to 2011 when all users were requested to change their master passwords following a network traffic anomaly. I have always defended LastPass ...

To Our LastPass Community,   

We recently notified you that an unauthorized party gained access to a third-party cloud-based storage service, which LastPass uses to store archived backups of our production data. In keeping with our commitment to transparency, we want to provide you with an update regarding our ongoing investigation.

Update: LastPass' data breach woes continue...In a March 1 update(opens in new tab), LastPass announced that the hacker behind the previous breach (August 2022) has hacked a senior engineer’s home computer and obtained access to a critical corporate vault available to only four top employees. 

The vault gave the hacker access...

Read More...

You still need to take action to protect your data even though LastPass said it hasn't seen any threat-related activity since October.

LastPass, one of the world's most popular password managers, suffered a major data breach in 2022 that compromised users' personal data and put their online passwords and other sensitive information at risk. 

Read More ...

LastPass, a password manager, revealed Monday that it had been the target of a hack that compromised account email addresses and several security elements used to encrypt user data.

"We are confident that our encryption measures are sufficient to protect the vast majority of users," the company said in a statement. "Nonetheless, we are taking additional measures to ensure that your data remains secure."

Read More...