{"id":25665,"date":"2022-12-23T19:06:44","date_gmt":"2022-12-23T19:06:44","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/23\/lastpass-august-breach-resulted-in-vault-leaks\/"},"modified":"2022-12-23T19:06:44","modified_gmt":"2022-12-23T19:06:44","slug":"lastpass-august-breach-resulted-in-vault-leaks","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/23\/lastpass-august-breach-resulted-in-vault-leaks\/","title":{"rendered":"LastPass’ August breach resulted in vault leaks"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

Hackers that targeted LastPass in August now have access to encrypted copies of users\u2019 password vault data.<\/p>\n

Master passwords were not compromised, according to the company\u2019s December 22nd blog post update.<\/p>\n

User data was not compromised in the August breach<\/a>, and hackers could only access source code and other technical information. However, hackers used this information to target an employee, gaining their credentials to access information.<\/p>\n

The hackers accessed \u201cbasic customer account information\u201d like company names, phone numbers, and email addresses, in addition to backup copies of users\u2019 password vaults.<\/p>\n

While master passwords protect this information, hackers might use brute force to access the passwords. But \u201cit would take millions of years to guess\u201d as long as users followed the company\u2019s best practices guidelines for constructing passwords.<\/p>\n

LastPass is warning users to be vigilant of phishing attacks where hackers will try to get access to information associated with master passwords.<\/p>\n

\u201cIt is important to know that LastPass will never call, email, or text you and ask you to click on a link to verify your personal information. Other than when signing into your vault from a LastPass client, LastPass will never ask you for your master password.\u201d<\/p>\n

Source: LastPass<\/a><\/p>\n<\/p><\/div>\n