LastPass hit by new data breach – 4 steps you should take now


LastPass website

Lance Whitney/ZDNET

Follow ZDNET: Add us as a preferred source on Google.


ZDNET’s key takeaways

  • A third-party data breach has impacted LastPass customers.
  • The breach exposed names, phone numbers, and other data.
  • No master passwords or password vaults were compromised.

Do you use LastPass as your password manager? If so, I got some bad news. Yes, another data breach, though this one occurred at one of the company’s third-party suppliers.

In a Tuesday blog post, LastPass revealed that a breach at a third-party supplier named Klue compromised certain contact and CRM (customer relationship management) data. The stolen information includes customer names, phone numbers, email addresses, and physical addresses, as well as support case and sales-related details. The only saving grace so far is that no master passwords or password vaults were compromised in the breach.

Also: Can you trust LastPass in 2026? Inside the multimillion-dollar quest to rebuild its security culture

As the blog post explains, Klue is a third-party market research platform used by LastPass to integrate with its Salesforce and Gong systems, allowing it to work with customer data and conduct market research. The hackers were able to snag the OAuth security tokens used by Klue to connect to customer data across these different systems. They then exploited these tokens to steal the LastPass user data stored in Salesforce.

How LastPass is responding

In response to the breach, LastPass explained that it cut off all employee access to Klue, refreshed the exposed tokens, kicked off an investigation in conjunction with Klue and Salesforce, and began working with law enforcement.

The company also announced that it’s sharing information with the broader cybersecurity community to help disrupt this latest campaign. Of course, LastPass promised to set up better protections to prevent this type of breach in the future.

Also: I’m done searching for the ‘perfect’ password manager – how I’ve embraced the chaos

In its own blog post, Klue said that it uncovered the breach on June 12. Since then, the company has also been working with cybersecurity experts to determine what happened and restore all the compromised connections.

LastPass was far from the only company affected by this breach. Other victims include Gong, Jamf, HackerOne, Insurity, OneTrust, Recorded Future, Snyk, Sprout Social, and Tanium, as reported by TechCrunch. Ransomware group Icarus has claimed responsibility for the breach, threatening that it would publish the compromised data if Klue didn’t pay the ransom.

What should LastPass users do?

First, you should have received an email from LastPass notifying you of the breach and advising you on further steps.

Second, be on the lookout for possible phishing attacks or social engineering scams that try to exploit the stolen contact details. As always, this means you should scrutinize any emails, texts, or phone calls in which the person asks for sensitive information.

Also: It’s possible to switch password managers without losing a single login – and I’m proof

Third, even though no passwords or password vaults were compromised, you may still want to change your master password. Make it strong but still memorable. A passphrase is always a good option, as it can be complex but still easy to remember.

Fourth, consider a different password manager. This is hardly the first time LastPass users have been impacted by a data breach or other significant problem.

Not a great track record

In 2022, a hacker grabbed some source code and proprietary LastPass technical data by exploiting a compromised account. But it didn’t end there. Later that year, the company revealed that information stolen during the first attack led to a second one that captured customer names, billing addresses, email addresses, telephone numbers, and IP addresses.

In 2020, a major outage prevented LastPass users from logging in to their accounts. Some users reported that they were affected for several days. In 2019, security researchers discovered a LastPass security bug that exposed login credentials entered on a previously visited site.

Also: The best password generators of 2026: Expert tested

That’s not a great track record. Yes, this latest breach wasn’t directly the fault of LastPass. And the company has promised to clean up its act following these past incidents. But there are other password managers out there with better records. Just a few candidates include 1Password, NordPass, and Bitwarden.

But isn’t it a hassle to switch from one password manager to another? It’s not as bad as you might think. I switched from one to another more than a year ago, and the process went much more smoothly than I expected.





Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews






It’s easy to assume that vehicles all had internal combustion engines until very recently. Gasoline and petrol engines were the standard for decades, after all, so why would early vehicles be any different? In reality, the early days of the automobile era were more varied than you might expect, and even featured a range of electric cars. Yes, despite electric vehicles not truly taking off until the 21st century, the first electric vehicles are much older than you think; drivers in the 1900s were going around town in electric vehicles — and where there are EVs, there are charging stations.

One such station, visible in the image above, was the creation of General Electric. Formally called the mercury arc rectifier, it took alternating current and sent it through vaporized mercury in a glass tube. This converted it into direct current, which powered up the EV’s battery. The woman in the image, who’s charging a Columbia Mark 68 Victrola, is standing at the control panel, which allowed a user to adjust power levels. 

These chargers could be installed everywhere, including homes, businesses, and public parking garages, supporting the electric vehicle boom of the early 20th century. While 21st-century EV chargers have come a long way from where they were, the basic building blocks are all still there, and it’s fascinating to see.

How EV chargers have evolved since the early 20th century

EV charging has changed a lot in some ways — but not in others. At the core of it all is the aforementioned conversion from AC to DC, which still happens when you charge modern EVs at standard charging stations. The difference is that your vehicle’s on-board charger performs the conversion, not the charger. Old EV chargers took between several hours and a day to charge, and current-day units can similarly take a few hours to well over a day from empty, depending on the charger’s speed. Fast chargers, which provide DC directly, can cut this down to around an hour or less.

Old-school and modern EV chargers also differ in how they provide power to the vehicle. Mercury arc rectifiers connected directly to the negative terminal of the lead-acid battery that needed charging. Nowadays, EVs use dedicated charging ports. Battery swapping was also commonplace in the early 1900s, and companies like General Electric tried to cash in by offering to replace drivers’ old, run-down batteries with new ones for a fee. That’s not yet possible with most mainstream EVs, although companies like Stellantis have tried to introduce EV battery swapping with moderate success.

Even if they were unrefined compared to today’s models, early EVs seemed to be on to something. Why, then, did electric cars fail, and how did gasoline end up becoming the predominant power source for vehicles?

What led to the downfall of the original wave of electric cars

EVs were no mere fad in the 1900s and 1910s. According to the 1900 United States census, 1,575 of the 4,192 vehicles sold that year were electric, with the value of these early EVs — $2,873,464 — accounting for more than half of the total market value of $4,899,443. It wasn’t just EVs, either; other sources of propulsion, like steam, were also vying for a foothold in the automobile market. By the 1920s and 1930s, though, these had all been superseded by the internal combustion engine.

One of the major drawbacks of early EVs was the fact that electricity was not yet widely available. Electrical hookups were a rarity outside of major cities, limiting the use of these vehicles. The lead-acid batteries they used also had their fair share of issues. They needed to be inspected, cleaned, and repaired every few days, making them more of an inconvenience than anything. Worse yet, they had poor mileage, and, with chargers possibly out of reach, many likely didn’t want to risk being stranded while out for a drive.

Eventually, price reductions for gas cars and improvements such as electric starters and better reliability prompted buyers and automakers alike to move away from electric rides. Thus, while the best-selling EVs of 2026 show that it’s a good time for EVs, this electric boom plainly isn’t the first of its kind. Early EVs eventually fizzled out, but they still set the stage for our current fascination with electric vehicles.





Source link