LastPass Acknowledged Hackers Got Their Hands on Encrypted User Data

In a recent development, LastPass has acknowledged the fact that hackers stole encrypted users’ password vaults and other sensitive information. 

LastPass users beware your passwords might be compromised. It is high time to change all your passwords and other account details. In addition to that, you should also look for a new password manager. 

We all are familiar with the security breach that happened at LastPass sometime ago. Initially, the company reported that the breach happened but hackers couldn’t gain access to anything sensitive but that has changed now. 

Reports about the first attack on the platform came to light in August 2022. In that attack, the hackers managed to steal LastPass’s source code. Soon after, the hackers managed to find vulnerabilities in the source code and planned an attack accordingly. The hackers carried out yet another attack in November. Initially, the company stated that it had “detected unusual activity within a third-party cloud storage service.”

Also Read: Xiaomi Introduced Xiaomi 13, 13 Pro With Snapdragon 8 Gen 2.

LastPass’s CEO shared some details in a blog post

Recently, Karim Toubba, CEO of the company, shared that the hackers gained access to other “credentials and keys which were used to access and decrypt some storage volumes within the cloud-based storage service.” Now, you can assume how grave the situation is with LastPass though the company has not shared the exact number of affected users.

Additionally, hackers also managed to get their hands on “company names, end-user names, billing addresses, email addresses, telephone numbers, and the IP addresses from which customers were accessing the LastPass service.” Plus, they also managed to “copy a backup of customer vault data from the encrypted storage container.” This container data also includes “unencrypted data, such as website URLs, as well as fully-encrypted sensitive fields such as website usernames and passwords, secure notes, and form-filled data.” That is the most troublesome piece of news. 

The best thing you can do at the moment is to change your passwords everywhere if you are a LastPass user. 

Also Read: Galaxy S23 Ultra Listed On TENNA, Here are the Key Highlights.