GoTo, the parent company of LastPass, in January confirmed a threat actor exfiltrated encrypted backups and an encryption key from the same storage vault that it shares with LastPass.

The intrusion allowed the threat actor to exfiltrate corporate vault entries and shared folders, which contained encrypted notes with access and decryption keys needed to access the company’s AWS production backups, resources and some critical database backups, the company said.įour months after the initial breach, as 2022 came to a close, LastPass said customer data, including encrypted passwords, usernames and form-filled data was significantly compromised by the attack. “The threat actor was able to capture the employee’s master password as it was entered, after the employee authenticated with MFA, and gain access to the DevOps engineer’s LastPass corporate vault.” Security lastpass data breach LastPass breach: its worse than initially thought The August incident compromised some users data, too By Alfonso Maruccia December 23, 2022, 9:59 35 comments. “The threat actor targeted one of the four DevOps engineers who had access to the decryption keys needed to access the cloud storage service,” LastPass said. Today, LastPass confirmed a data breach in a blog post describing the incident to its customers that rely on the company’s products for online security. Password management software LastPass suffered a breach to its cloud servers in August 2022. In November 2022, LastPass again notified customers that an unauthorised party had gained access to a third party cloud storage device, compromising certain elements of its customer.

Lastpass security breach