LastPass states that hackers stole customer personal information and client support worksheet records during the invasion of Klue, its technical partner. This was another security incident in recent years in which the company had disclosed customer data. The company stated that its infrastructure had not been affected and that the user password library had not been reached.
Stolen data from client support system
At present, LastPass has not indicated how many customers were affected, nor has it disclosed what was specifically included in the stolen worksheets. Based on common use scenarios, clients usually contact support teams because of billing problems or account visits, so that some sensitive information may be included in the worksheet records.
In similar cases, client support materials sometimes resulted in login or identification documents. TechCrunch stated that LastPass had not responded to further questions about the number of people affected and the details of the incident.
Klue discovered the invasion on June 12th.
In his blog, Klue CEO Jason Smith stated that the company discovered hackers entering its system on June 12. A hacker extortion organization called Icarus claimed responsibility for the invasion and threatened to release stolen data publicly if no ransom was received.
To date, Klue has not indicated how many of its clients have been affected, nor has it responded to any contact with hackers.
LastPass 2022 was still remembered by the market.
LastPass had a major data leak in 2022, when hackers stole a copy of the company ' s entire customer password library. Although the password library is encrypted by the user ' s master password, weak master password accounts can still be broken offline with violence.
Since then, a number of incidents of theft of encrypted assets have been linked to that leak. The suspicion is that the assailant may have access to sensitive information, such as the victim ' s wallet key, by breaking the passwords.
Additional information:According to LastPass official network data, by 2024 the product had over 33 million users, of which about 1.6 million were paid customers.
