LastPass determined that these were the result of a credential stuffing attack. In December of 2021, LastPass users reported that their master passwords were compromised after receiving email warnings that someone tried to use them to log into their accounts from unknown locations and devices. Since your individual passwords are encrypted and locked behind a master password that even LastPass does not know, this worry seems unjustified. And indeed here was some speculation on social media that hackers may be able to access the keys to password vaults after stealing source code and proprietary information. Stolen passwordsīecause of the nature of their business, a breach notification naturally worries people that the passwords they stored in their password manager may have been leaked or compromised.
Usually, these passwords are stored in an encrypted database and locked behind a master password. A password manager is a software application designed to store and manage online credentials. LastPass offers a password manager which is reportedly used by more than 33 million people and 100,000 businesses around the world. There is no evidence that this incident involved any access to customer data or encrypted password vaults.
In a security incident notice from LastPass the company informed the public know that an unauthorized party gained access to portions of the LastPass development environment through a single compromised developer account.
0 kommentar(er)
