LastPass has reported another data breach this week, its second in 2022. Details of the breach were shared by CEO Karun Touba, who said the company is investigating another breach of the password manager.
Touba explained that the company was alerted to some unusual activity in its third-party cloud storage service. “We immediately launched an investigation, involving Mandiant, a leading security firm, and alerted law enforcement,” Touba said in a statement. blog post on Wednesday.
In August, LastPass previously disclosed information about the breach, through which hackers were able to steal sensitive data and the company’s source code. Toubba noted that it is possible that the hackers used information obtained from previous hacks to try and steal information from their customers. He did not elaborate on what details could possibly have been accessed. The company is working to understand the scope of the incident, according to Touba.
However, they have assured customers that no passwords were exposed in this breach, claiming that LastPass’ zero knowledge technology keeps them safe behind strong encryption.
As he mentioned last time, Tuba said that the master password has not been disclosed, and that LastPass does not have access to the password vault, which could put it at risk should such incidents occur.
Password managers have become an essential tool in this day and age, where remembering all the passwords for your digital accounts can be a nightmare. Furthermore, since most people use simple passwords, these managers allow them to have special character and alphanumeric login codes that are harder to crack.
LastPass, which counts more than 25 million users, works by collecting hundreds of passwords consumers and corporate users use to log into their social media accounts, business networks, online retailers and more.
read all Latest Tech News Here