LastPass user data stolen by hackers again


Password manager LastPass says a supply chain attack involving third-party vendor Klue exposed customer contact and support information, though customer vaults and stored credentials were not affected.

An unauthorized actor accessed LastPass’s Salesforce environment using OAuth tokens stolen from third-party vendor Klue. The breach exposed sensitive customer details including names, phone numbers, and support records.

The incident was limited to systems integrated with Klue and didn’t affect LastPass products, infrastructure, or services.

Klue disclosed on June 22 that someone gained access through a compromised legacy credential tied to an integration service. The intrusion led to the theft of OAuth tokens used to connect Klue with third-party platforms, including Salesforce.

The investigation found the stolen tokens were used to access data within connected customer environments. Exposed information included customer names, phone numbers, email addresses, physical addresses, support case information, and sales-related CRM data.

The security incident exposed customer data stored in systems used for LastPass support and sales operations. The incident differs from LastPass’s 2022 breach because the Klue compromise didn’t expose password vaults or encrypted customer credentials.

LastPass has faced repeated data security incidents

The Klue breach isn’t the first time LastPass customer information has been exposed. LastPass disclosed a breach in June 2015 after detecting suspicious activity on its network.

The company said encrypted user vault data wasn’t taken. Account email addresses, password reminders, per-user salts, and authentication hashes were compromised.

LastPass faced a much more serious breach in 2022. Attackers first gained access to a development environment before expanding their access to cloud storage resources.

iPad screen displaying the LastPass Password Manager app page in the App Store, showing app icon, ratings, description, and a row of preview screenshots of the app's interfaceLastPass in the App Store

The intrusion resulted in the theft of customer account information and encrypted vault backups. Stolen data included names, billing addresses, email addresses, phone numbers, IP addresses, website URLs, and encrypted vault contents.

The Klue incident is the latest in a series of security incidents involving LastPass customer information.

Exposed customer data could fuel phishing attacks

The Klue breach doesn’t appear to have increased the immediate risk to stored passwords based on information released so far. The exposed customer information could still help criminals carry out phishing and social engineering attacks.

Exposed customer contact information and support records could make phishing attacks more convincing. Criminals can use details such as email addresses, phone numbers, and prior support interactions to appear legitimate.

Access to that information may increase the chances of persuading someone to disclose credentials or other sensitive data. LastPass urged customers to remain cautious of unsolicited communications and reminded users that employees will never ask for a master password.

Both companies say they have taken steps to contain the incident. LastPass rotated affected access tokens, disabled employee access to Klue, launched an investigation, and notified law enforcement.

Klue revoked affected credentials and tokens, removed unauthorized code, and disabled impacted integrations. Neither LastPass nor Klue has publicly identified the threat actor responsible for the attack.

How to stay safe

Customer contact information and support records may have been exposed, making phishing and social engineering a more likely risk than password theft.

Customers should be cautious of unexpected emails, text messages, or phone calls claiming to be from LastPass or another trusted company. Avoid clicking links in unsolicited messages and verify account-related requests by visiting official websites directly.

LastPass also reminded customers that employees will never ask for a master password. Anyone who receives a request for a master password should treat it as suspicious and report it through official support channels.

Using multi-factor authentication, unique passwords, and passkeys where available can also help reduce the impact of phishing attempts and account compromise.



Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews


I am a recent convert to physical media — yet even as someone getting back into buying discs in 2026, I haven’t been buying Blu-rays. Like many Americans, I still pick up DVDs instead. These aren’t great times for the Blu-ray format, and don’t expect a turnaround in 2026.

Fewer new releases make their way to Blu-ray

More media is now released exclusively for streaming

Blu-ray has been around for two decades, but it never managed to fully replace, or even overtake, the DVD format it was designed to supersede. We still can’t take for granted that our favorite movies, let alone TV shows, will eventually see a Blu-ray release.

The movies most likely to come to Blu-ray are the ones that hit theaters, but a growing amount of cinema is designed exclusively with streaming platforms in mind. I recently rewatched Mississippi Masala, which led me to check in on what work Sarita Choudhury has done over the decades since. A film called Evil Eye released in 2020 caught my eye. Unfortunately, it’s only available via Prime Video. There’s no Blu-ray or even a DVD. In contrast, it’s easy to watch Michael B. Jordan in Sinners on Blu-ray, since that movie came to theaters last year.

You could say that it makes sense that a movie with a 4.8/10 rating on IMDb doesn’t see a physical release, but in the heyday of physical video, store shelves were stacked not only with just the big-budget bangers but plenty of straight-to-DVD movies as well. Now those films exist to pad out streaming catalogs instead.

Fewer big box stores stock their shelves with physical discs

Blu-ray discs have disappeared from some stores entirely

Best Buy store front
Best Buy

The format’s demise is striking. I frequent my local Best Buy quite often and don’t see any movies on display. That’s because the retailer stopped selling movies in stores several years ago. Walmart still sells them, but the selection is a fraction of what you could find ten or twenty years ago. The audience has been reduced down to the shrinking number of people whose internet at home can’t handle streaming and those who might think of themselves as collectors.

If you venture onto Reddit and visit r/Blu-ray, you will find more threads about thrift store hauls and older collections than excitement over the latest new release. Don’t get me wrong — I, too, am very excited about seeing what gems I can snag for only a couple bucks, but this shows the challenge retailers face. Increasingly, only enthusiasts are prepared to drop over $20 on a disc.

I’m not buying discs to stick them in a player

Phone on a stand playing a Netflix video Credit: Bertel King / How-To Geek

The simple truth is that most people don’t want to buy physical media. Discs don’t fit in phones, and the drives are no longer available in most laptops. Even desktop PCs lack a place to put a disk. I recently built a PC for the first time in part to digitize my media library, and I rely on an external DVD drive connected via USB. Yes, DVD, not Blu-ray. A smaller file size combined with upscaling is easier on my hard drive.

Retro nostalgia hasn’t helped Blu-ray in the same way it has aided vinyl. This is in part because most people simply don’t care all that much about video quality. Most are streaming video on Netflix and YouTube at middling settings on small screens, and many of us are acclimated to mid-range phone speakers, compared to which even the subpar built-in speakers on modern TVs sound like a huge step-up. It’s hard to convince large numbers of people to purchase an expensive version of a movie in a format that requires thousands of dollars of home media equipment to truly appreciate.

4K Ultra HD is in an even worse position

It’s been a decade, yet few people own these discs

The 4K Ultra HD Blu-ray format is an enhancement, rather than a replacement, of the Blu-ray discs that first appeared in 2006. Debuting in 2016, the 4K Ultra HD format supports the max resolution of a 4K TV.

4K TVs were still somewhat of a novelty ten years ago, but they’re cheap and commonplace today. Still, people aren’t demanding 4K-quality Blu-ray movies as a result. These discs are still less common than 1080p ones, which are themselves still outnumbered by DVDs.

This isn’t merely a matter of consumers preferring the cheaper option. Often, 4K simply isn’t a choice, or it’s one that arrives significantly later, like the Switch port of a PC title. Some recent films, like Exit 8, are slated to see a physical release over the summer yet will still be in 1080p when they do. Adoption of the newest format has been that slow.

The industry isn’t helping itself, either. 4K Ultra HD Blu-ray discs come with DRM and aren’t easy to play on a modern PC, further limiting potential growth. They do not want anyone pirating these super high-quality versions. When you consider that some of these 4K Blu-rays have an AI upscaling problem, you’re paying more for what may not even be the best version.​​​​​​​


Blu-ray is seeing fewer releases, is available in fewer places, and is less accessible in the ways many of us want to watch TV shows and movies in 2026. With our portable devices getting better and internet speeds getting faster, it’s hard to see physical video staging a turnaround, even if we’re still a long way off from it going away entirely.



Source link