Friday 23 December 2022
On December 22, 2022, LastPass posted an update on the breaches that occurred in recent months.
It appears that the attackers have gained access to a backup environment. Users' password vaults are also located in that environment. These are now in the hands of criminals and/or state actors. Some of the users' information is encrypted, according to LastPass. Parts, including website URLs, were not encrypted.
Despite LastPass claiming that the attackers cannot access the encrypted information, including passwords, LISA Security Management recommends changing both the Master Password and ALL passwords stored in the vault.
More information can be found on the LastPass blog.
