What happened this time?ĭuring that last incident, LastPass added that some snippets of its source code and proprietary information were stolen. In addition to increasing security measures against future attacks from hackers, the company usually offers free credit monitoring services to all affected customers for 12 months after the incident occurred. This means that before accessing any customer accounts, users must provide additional proof of identity in addition to their password. What do do they do next? They increase their protection measures by validating all customer logins using two-factor authentication (2FA). They then notify customers by email that their information in the encrypted password vaults has been compromised. The company detects unusual activity on their source code, customer data or encrypted data and alerts law enforcement officials.

What usually happens to customer data or encrypted data?

You might think that customer data would be safe in the hands of leading security firms, but this isn't always the case. What happens to your encrypted data when your company experiences a customer data breach? A month later, they uploaded a follow-up post with more details about the breach, like the fact that the password vaults weren’t affected and reassuring a strong security posture to prevent similar incidents from happening in the future. In August of this year, the company submitted a post on its official website indicating that a development environment had been compromised revealing part of the customer’s data. The company said that it had deployed additional security measures to further protect customer data and their encrypted passwords - however, with this new breach, it begs to question how thorough those measures were. This isn't the first time LastPass announced that its data vault was breached by an unauthorized party.Īnother incident occurred in 2021, when LastPass deployed enhanced security controls to protect the master passwords of its customers. LastPass, a password manager solution provider and leading security firm, has been involved in a security incident again, after a couple of recent events. Another LastPass Data Breach? Some context

Last pass data breach