{"id":20245,"date":"2022-12-01T16:16:02","date_gmt":"2022-12-01T16:16:02","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/01\/lastpass-just-had-another-security-breach\/"},"modified":"2022-12-01T16:16:02","modified_gmt":"2022-12-01T16:16:02","slug":"lastpass-just-had-another-security-breach","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/01\/lastpass-just-had-another-security-breach\/","title":{"rendered":"LastPass Just Had (Another) Security Breach"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n
\n
\"LastPass
LastPass<\/span><\/figcaption><\/figure>\n

The LastPass password manager suffered a security breach back in August<\/a>, resulting in source code and other proprietary information being stolen, but no account information. Now it has suffered another<\/em> breach, and this time, some user data was<\/em> stolen.<\/p>\n

LastPass announced the new security problem in a blog post, saying it was possible using information obtained in the August hack. The company explained, \u201cwe have determined that an unauthorized party, using information obtained in the August 2022 incident, was able to gain access to certain elements of our customers\u2019 information. Our customers\u2019 passwords remain safely encrypted due to LastPass\u2019s Zero Knowledge architecture.\u201d<\/p>\n

LastPass didn\u2019t say exactly which \u201ccertain elements\u201d of customer information were accessed. Passwords (allegedly) were not accessed, which leaves email addresses, payment info, or something else. The company\u2019s investigation is still ongoing.<\/p>\n

It\u2019s great to see LastPass being transparent about any security breaches \u2014 many companies just keep security incidents under wraps for as long as they can \u2014 but it\u2019s not<\/em> great that a password manager was hacked twice within the span of a few months. There was also an alleged leak back in December 2021<\/a>, where some people had unauthorized login attempts using a stolen master password, but LastPass chalked that up to a credential stuffing attack targeted at people who were reusing passwords.<\/p>\n

Source: LastPass<\/a>
Via: Ghacks<\/a><\/small><\/p>\n<\/div>\n


\n\n<\/div>\n