Major password manager LastPass suffered a breach — again

In this photo illustration, the LastPass logo is reflected on the internal discs of a hard drive in 2017 in London. On Wednesday, the password service reported"unusual activity" within a third-party cloud storage service but said that customers' passwords remain safely encrypted.In this photo illustration, the LastPass logo is reflected on the internal discs of a hard drive in 2017 in London.

"We immediately launched an investigation, engaged Mandiant, a leading security firm, and alerted law enforcement," Toubba wrote in a statement.An unauthorized party gained access to parts of the LastPass development environment during a four-day period in August. There was no evidence of access to customer data, Toubba wrote after this first breach, noting that the development environment does not contain any customer data.

Three months later, the same party used the information it gained in August to access"certain elements" of customers' information, Toubba said."We are working diligently to understand the scope of the incident and identify what specific information has been accessed," Toubba said."In the meantime, we can confirm that LastPass products and services remain fully functional.

Still, the company recommended that its users"follow our best practices around setup and configuration,"

Source: News Formal (newsformal.com)

This is why companies should stop having ridiculous password requirements that no one can remember.

HardPass

D'Oh!

They’re a huge target being honest about the outcomes of constant attacks, and the passwords stayed encrypted. I’m impressed

as long as it’s not a colonel password manager, we gucci

Madness

And we keep being told that post it notes are not secure. 🤣

No one can hack a paper list of passwords. Analogue for me.

Really?

BitWarden is better btw.

United States Latest News, United States Headlines

Similar News:You can also read news stories similar to this one that we have collected from other news sources.

LastPass reveals another security breach | EngadgetAn unauthorized party got into LastPass' cloud service by using information obtained from the security breach it suffered in August this year.. So glad I dropped them a while ago and switched to 1Password. I'm not sure a company like LastPass would ever admit to a breach of user information if it ever took place considering that is its entire business. Do they even have independent audits?
Source: engadget - 🏆 276. / 63 Read more »

Hackers just stole LastPass data, but your passwords are safe | Digital TrendsLastPass has suffered its second security breach in just a few months as hackers made off with data, but luckily user passwords are safe and encrypted.
Source: DigitalTrends - 🏆 95. / 65 Read more »

New LastPass Hack Confirmed—Here’s What We Know So FarLastPass, with 25 million users, has confirmed another data breach - the second this year.
Source: ForbesTech - 🏆 318. / 59 Read more »

LastPass' latest data breach exposed some customer informationLastPass says the breach didn’t leak stored passwords first users flocked to the likes of 1Password cause LastPass stopped single device ability for free, and now this… oof, it can’t be a good look… Another day, another breach. 🤷‍♂️ And this is why I use dashlane
Source: verge - 🏆 94. / 67 Read more »

USD/JPY bounces off its lowest level since August, upside potential seems limitedThe USD/JPY pair stages a modest bounce from its lowest level since August 23 touched during the early European session on Thursday and climbs back ab
Source: FXStreetNews - 🏆 14. / 72 Read more »

GBP/USD surpasses 200 DMA, taps 1.2200 for the first time since August amid weaker USDThe GBP/USD pair builds on the overnight solid bounce from the 1.1900 mark, or the weekly low and gains strong follow-through traction for the second
Source: FXStreetNews - 🏆 14. / 72 Read more »