Lastpass Data Breach Frightens Users, Some Say Hack ‘May Be Worse Than They Are Letting on’

Share This Post

People involved in financial tech, software programming, cyber security, and cryptocurrencies have been talking about the Lastpass data breach that was disclosed two days ago. The password management company detailed that a breach, committed earlier this year, allowed hackers to obtain a “backup of customer vault data.”

Lastpass Reveals ‘Threat Actor Was Also Able to Copy a Backup of Customer Vault Data’

On Dec. 22, 2022, the password management firm Lastpass disclosed that an “unknown threat actor” managed to breach the firm’s cloud-based storage environment in or around Aug. 2022. As soon as the news was published, the Lastpass data leak has been a topical discussion on social media and forums. A great number of people believe that Lastpass’ situation “may be worse than they are letting on.”

“Based on our investigation to date, we have learned that an unknown threat actor accessed a cloud-based storage environment leveraging information obtained from the incident we previously disclosed in August of 2022,” Lastpass disclosed. The password management company added:

The threat actor was also able to copy a backup of customer vault data from the encrypted storage container which is stored in a proprietary binary format that contains both unencrypted data, such as website URLs, as well as fully-encrypted sensitive fields such as website usernames and passwords, secure notes, and form-filled data.

Lastpass insists the encrypted fields are secure with 256-bit AES encryption and the info can only be decrypted by leveraging each user’s master password using the firm’s zero-knowledge architecture. “As a reminder, the master password is never known to Lastpass and is not stored or maintained by Lastpass,” the company detailed.

Lastpass’ Security Reassurance Doesn’t Seem to Convince a Number of Critics

However, a number of reports believe that the situation is worse than Lastpass is letting on. Reviewgeek.com’s Andrew Heinzman stresses in his report to “please, stop using Lastpass.” “Even if you use a strong master password, there’s a chance that hackers will try to phish some information out of you,” Heinzman wrote. The author added:

To be clear, Lastpass is still investigating this data breach. And after four months of ‘sorry, it’s worse than we thought,’ customers are rightfully worried that Lastpass doesn’t have all the details. For all we know, things could get even worse. We asked our readers to stop using Lastpass in July 2020.

Crypto supporter Udi Wertheimer also warned people that if they use Lastpass “attackers probably have a copy of your vault.” Wertheimer’s recommendation is the same as Heinzman’s as the digital currency proponent insisted that users should “stop using Lastpass.”

“We don’t know how bad things are,” Wertheimer added. “It’s possible that attackers have ongoing access, so don’t just change your passwords and put them back into Lastpass.” Moreover, a Twitter user who claims to have worked as an engineer for the company seven years ago also noted that Lastpass’ breach situation is a big deal.

“I worked at Lastpass as an engineer a long time ago. 7+ years ago. My 2 cents on the situation,” the individual said. “This is the worst breach Lastpass has had. By a lot. The key difference is that customer vaults were accessed this time, which are kept in a completely separate database.”

What do you think about the Lastpass data breach and the speculation that it is worse than Lastpass is letting on? Let us know what you think about this subject in the comments section below.

Read Entire Article
spot_img
- Advertisement -spot_img

Related Posts

Solana Surges As Momentum Resumes, Is $240 the Next Stop?

Solana (SOL) is gaining momentum once more, with bullish energy pushing it higher as it aims for the next major resistance at $240 Following recent consolidations, SOL has surged onto traders’

Coinbase Acquires Utopia Labs Team to Accelerate Onchain Payments

Coinbase is enhancing its onchain payments capabilities with the acquisition of the Utopia Labs team, which will join Base to advance the onchain payments roadmap within Coinbase Wallet Jesse Pollak,

Crypto Legal Battle: 18 States Accuse SEC Of Unconstitutional Regulatory Actions

In a significant challenge to the US Securities and Exchange Commission (SEC) and its regulatory approach toward the crypto industry, 18 states have filed a lawsuit against the agency and its

SEC facing joint lawsuit from 18 US states over ‘unconstitutional persecution’ of crypto

Attorney Generals of 18 US states have filed a joint lawsuit against the Securities and Exchange Commission (SEC), its Commissioners, and Chair Gary Gensler The lawsuit accuses the agency of

Senator Lummis Proposes Selling Fed’s Gold To Fund Strategic BTC Reserve: Bloomberg

The post Senator Lummis Proposes Selling Fed’s Gold To Fund Strategic BTC Reserve: Bloomberg appeared first on Coinpedia Fintech News According to a latest Bloomberg report, Republican Senator

New Era For Crypto Regulation? SEC Chair Gensler Suggests He May Step Down

A potential shift in crypto regulation could be in the works as the US Securities and Exchange Commission (SEC) Chairman Gary Gensler hints at a possible resignation following President-elect Donald