LastPass Data Breach: What We Know

LastPass had a security problem with a company it works with, and customer data was exposed.

LastPass said this week that hackers got in through a company called Klue, which LastPass uses to track competitors. The hackers got special tokens from Klue and used them to access LastPass customer data.

The information that was exposed included names, phone numbers, and email addresses. LastPass said its main products and customer passwords were not affected.

The problem was not just with LastPass. A group called Icarus said they did the attack, which also affected other companies like Huntress and ReliaQuest. The attackers used old login information to get tokens and then stole data from many organizations.

Icarus is asking companies to contact them or they will publish the stolen data.

LastPass has stopped Klue's access, told the police, and is working with the security community.

LastPass is warning customers to be careful of fake emails and messages that could use the exposed contact information. LastPass will never ask for a master password.

This is about cybersecurity.

COPYRIGHT DISCLAIMERS

4English does not own the rights to this content. All rights belong to the owner. 4English only uses this content to help users learn English via the app's features. Contact to request the removal of your content: contact@4englishapp.com.

Practice Listening