← LastPass

2015 — LastPass: LastPass notified customers of a data breach when…

2015 Unknown records affected Share on X

Data compromised

Personal information

Technical writeup

LastPass notified customers of a data breach when they discovered suspicious activity on their network. The company has communicated that In our investigation, we have found no evidence that encrypted user vault data was taken, nor that LastPass user accounts were accessed. The investigation has shown, however, that LastPass account email addresses, password reminders, server per user salts, and authentication hashes were compromised.The company is requiring that all users who are logging in

Root cause

Hacking

References