LastPass Data Breach

[ishanjain28]

I wonder if bitwarden is immune to such breaches or if they are not transparent enough to report them?

Data of some bitwarden users was found in a leak. They were prompt in investigating and found out it was users who exported their vault, left it unencrypted on their machine and that file was stolen by some software. German news magazine reports about alleged Bitwarden data breach?

 

[Navjot Singh]

Parsing LastPass' data breach notice | TechCrunch

Decoding what LastPass said — and hasn't said — about its second breach this year, in which hackers accessed customers' information.

techcrunch.com

 

[Chip]

That's it...I am moving away from LP...even before my subs expires. Will backup and delete my data

 

[Sushubh]

Lastpass: Hackers stole customer vault data in cloud storage breach

LastPass revealed today that attackers stole customer vault data after breaching its cloud storage earlier this year using information stolen during an August 2022 incident.

www.bleepingcomputer.com

 

[Navjot Singh]

What’s in a PR statement: LastPass breach explained

The LastPass statement on their latest breach is full of omissions, half-truths and outright lies. I’m providing the necessary context for some of their claims.

palant.info

The best explanation of how much worse LastPass's security practices are and their long history of ignoring security reports.

Ideally the best way forward is to not just switch to a different password manager but also change passwords across the main if not all of your accounts.

 

[Navjot Singh]

Jeremi M Gosney :verified: (@epixoip@infosec.exchange)

I recently wrote a post detailing the recent #LastPass breach from a #password cracker's perspective, and for the most part it was well-received and widely boosted. However, a good number of people questioned why I recommend ditching LastPass and expressed concern with me recommending people...

infosec.exchange

 

[Navjot Singh]

LastPass owner GoTo says hackers stole customers' backups | TechCrunch

LastPass' parent company says intruders stole the company's encryption key for securing its customers' backed up data.

techcrunch.com

Lastpass's data was used to breach Goto customers' data across all its services. This just got 100 times worse.

 

[Navjot Singh]

LastPass says employee’s home computer was hacked and corporate vault taken

Already smarting from a breach that stole customer vaults, LastPass has more bad news.

arstechnica.com