Notification: Security Incident at LastPass


Userlevel 7
Badge +7
  • Veeam Legend
  • 717 comments

LastPass have just announced a Security incident on their platform limited to their Development environment with apparently no compromise to user vaults.

More here: https://blog.lastpass.com/2022/08/notice-of-recent-security-incident/


11 comments

Userlevel 7
Badge +20

Yikes.  Still have a subscription with them but may cancel as I use Dashlane.

Userlevel 7
Badge +13

If I remember correctly it's second time that happens for LastPass...

Userlevel 7
Badge +8

Im trying passbolt onprem in my home lab.

https://www.passbolt.com

 

Userlevel 7
Badge +20

Im trying passbolt onprem in my home lab.

https://www.passbolt.com

 

It is actually very good we use that at work. 

Userlevel 7
Badge +13

Im trying passbolt onprem in my home lab.

https://www.passbolt.com

 

Never heard about it, I’ll give a try but when we’re talking about password manager I prefer expensive paid solutions (and LastPass got a free subscription...). To have better security (sync password manager talking) must pay.

Userlevel 7
Badge +13

Ok, I was right.

28 Dec 2021:
https://www.bleepingcomputer.com/news/security/lastpass-users-warned-their-master-passwords-are-compromised/

Userlevel 7
Badge +20

Twice in under a year 😬

 

Also, unrelated to password managers but heavily utilised within the tech communities, Plex have had some unauthorised data access too!

 

https://forums.plex.tv/t/important-notice-of-a-potential-data-breach-24th-of-august-2022/806518

Userlevel 7
Badge +13

I deleted my unused account just yesterday, after that email. Not good at all.

Userlevel 7
Badge +14

@marcofabbri I didn't know about the one in 2021. But then it's actually their 3th incident. They've had a breach/hack in 2015...🙄

Too many incidents in my opinion for such a critical tool.

Userlevel 7
Badge +7

Hey,
Password manager  LastPass has confirmed that cybercriminals stole its customers’ encrypted password vaults, which store its customers’ passwords and other secrets.

In an updated blogpost on its disclosure, LastPass CEO Karim Toubba said the intruders took a copy of a backup of customer vault data by using cloud storage keys stolen from a LastPass employee.

https://blog.lastpass.com/2022/12/notice-of-recent-security-incident/

 

how to lose the trust of these customers :(

Userlevel 7
Badge +20

Hey,
Password manager  LastPass has confirmed that cybercriminals stole its customers’ encrypted password vaults, which store its customers’ passwords and other secrets.

In an updated blogpost on its disclosure, LastPass CEO Karim Toubba said the intruders took a copy of a backup of customer vault data by using cloud storage keys stolen from a LastPass employee.

https://blog.lastpass.com/2022/12/notice-of-recent-security-incident/

 

how to lose the trust of these customers :(

Wow. I did use them at one point but may not again now due to this.

Comment