2015 — LastPass: LastPass notified customers of a data breach when…
Data compromised
Personal information
Technical writeup
LastPass notified customers of a data breach when they discovered suspicious activity on their network. The company has communicated that In our investigation, we have found no evidence that encrypted user
vault data was taken, nor that LastPass user accounts were accessed. The
investigation has shown, however, that LastPass account email
addresses, password reminders, server per user salts, and authentication
hashes were compromised.The company is requiring that all users who are logging in
Root cause
Hacking