{"id":25492,"date":"2022-12-22T23:56:38","date_gmt":"2022-12-22T23:56:38","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/22\/the-lastpass-data-breach-just-got-even-worse-again-review-geek\/"},"modified":"2022-12-22T23:56:38","modified_gmt":"2022-12-22T23:56:38","slug":"the-lastpass-data-breach-just-got-even-worse-again-review-geek","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/22\/the-lastpass-data-breach-just-got-even-worse-again-review-geek\/","title":{"rendered":"The LastPass Data Breach Just Got Even Worse \u2026 Again \u2013 Review Geek"},"content":{"rendered":"

<\/a>\n<\/p>\n

\nNews<\/strong> <\/p>\n

Please, stop using LastPass.<\/p>\n

\n<\/div>\n

\n
\"The
Tada Images \/ Shutterstock.com<\/a><\/span><\/figcaption><\/figure>\n

After getting hacked in August, LastPass promised<\/a> that customer data was safe. Later, the company admitted that customer data was compromised<\/a>, but claimed that user passwords were not part of the data breach. Unfortunately, LastPass was\u00a0completely and totally wrong.<\/p>\n

According to a new\u00a0LastPass press release<\/a>, hackers obtained a\u00a0\u201cbackup of customer vault data\u201d during the big security breach earlier this year. The information stored in this vault data is encrypted, but a hacker can decrypt it using your master password\u2014that\u2019s the password you use to log into LastPass.<\/p>\n

If your LastPass master password is something simple, like \u201cpassword1234\u201d or \u201cguitarhero1984,\u201d you\u2019re probably screwed. Hackers can easily guess these simple passwords using brute force. For security\u2019s sake, please change your password on every website immediately. (A rival password manager that hasn\u2019t been hacked, such as 1Password<\/a>, can help you get the job done.)<\/p>\n

Users who created a strong master password might be in the clear. At least, that\u2019s what LastPass says. The company claims that it would be \u201cextremely difficult\u201d to guess master passwords for customers who followed the company\u2019s \u201cbest practices<\/a>\u201d guidelines.<\/p>\n

\n

\u201cThe threat actor may attempt to use brute force to guess your master password and decrypt the copies of vault data they took. Because of the hashing and encryption methods we use to protect our customers, it would be extremely difficult to attempt to brute force guess master passwords for those customers who follow our password best practices.<\/a>\u201c<\/p>\n<\/blockquote>\n

Even if you use a strong master password, there\u2019s a chance that hackers will try to phish some information<\/a> out of you. LastPass warns that it \u201cwill never call, email, or text you and ask you to click on a link to verify your personal information.\u201d<\/p>\n

To be clear, LastPass is still investigating this data breach. And after four months of \u201csorry, it\u2019s worse than we thought,\u201d customers are rightfully worried that LastPass doesn\u2019t have all the details. For all we know, things could get even worse.<\/p>\n

We asked our readers to stop using LastPass<\/a> in July of 2020. And we still implore you to avoid this service. LastPass has a long record of data breaches, two of which occurred this year!<\/p>\n

Source: LastPass<\/a><\/small><\/p>\n<\/div>\n