LastPass Data Breach: Personal Information and Support Cases Stolen
LastPass is notifying customers that their personal information and customer support case data were stolen after hackers breached Klue, a competitive intelligence vendor that held OAuth tokens granting access to LastPass’s Salesforce environment. The breach did not compromise LastPass’s own infrastructure or its customers’ encrypted password vaults. Since the recent breach at Klue, LastPass has implemented stringent new security protocols. They've enhanced OAuth token management, introduced multi-factor authentication for customer support access, and are performing a comprehensive review of their vendor risk assessment program. Additionally, LastPass is offering free identity monitoring services to affected users for the next year. This proactive response demonstrates a commitment to customer data protection and rebuilding trust. Read the full LastPass data breach update The stolen data includes names, phone numbers, email [...]
This story continues at The Next Web.