Solved LastPass hit by new data breach - 4 steps you should take now

Stigg · Jul 21, 2026

LastPass Warns Users Not To Enter Password As New Attack Is Confirmed

LastPass users are being warned not to respond to a security alert email that looks like it comes from the password manager but is part of a credentials-stealing attack.

www.forbes.com

Borg 386 · Wednesday at 10:44 AM

Stigg said:
LastPass Warns Users Not To Enter Password As New Attack Is Confirmed

LastPass users are being warned not to respond to a security alert email that looks like it comes from the password manager but is part of a credentials-stealing attack.

www.forbes.com

Again?

Stigg · 2026-07-28T02:41:05-0400

This explains pretty well why the LastPass architecture was always going to make it a target.

https://www.reddit.com/r/EnpassOfficial/comments/1v8pkpd/can_password_managers_actually_avoid_being

TraderGary · 2026-07-28T04:55:49-0400

Zero Knowledge IS the architecture.

kelper · 2026-07-28T05:53:51-0400

Stigg said:
This explains pretty well why the LastPass architecture was always going to make it a target.

https://www.reddit.com/r/EnpassOfficial/comments/1v8pkpd/can_password_managers_actually_avoid_being

Well, EnPass would say that, wouldn't they! It's just marketing puff.

hader · 2026-07-28T06:51:52-0400

Used Lastpass a couple of years ago. It was then a free service until an investor came along and demanded money. Said goodbye then. They assured everyone that your data vault is encrypted with a key you posses (you made that master password). If you lost that key; they could not retrieve your data because they don't have that key either. If this is the case:

If I look at the first post; there seems to be some sort of contradiction;

The breach exposed names, phone numbers, and other data.
No master passwords or password vaults were compromised.

It's the one or the other. Or no encryption was used so they got the data, or the data is encrypted and did not got the keys; so the stolen data is useless.
Which one is true?

As if things aren't bad enough; it was a breach at a 3rd-party company that Lastpass was using. As a Lastpass company you have to screen every company who's has contacts with; by looking for security vulnerability's. If they thought this is not important you better close shop. Customers a paying for having that kind of security.
This breach was a breach of security; Not all systems were patched or were using code with security holes in it. This is now the 4th time that this has happend. Really strange for a company that claims your data is secure. It is possible that the new investor has tuned down security in order to save money. As time goes by the reputation of the company goes down the drain. These company's attracts hackers because if they get the raw data; the list has value and they will sell it on Telegram etc. Is it known if the hackers already sold the raw data (names, phone numbers, and other data)?

I don't know the company's name of that 3rd-party and what kind of service they were selling to Lastpass, but Lastpass is not mentioned at the "Have I Been Pwned?" website; itself: Have I Been Pwned: Who's Been Pwned

kelper · 2026-07-28T06:58:13-0400

The problem was that only passwords and secure notes were encrypted. The hackers got access to customer profiles which included names, addresses, email addresses and telephone numbers. This data gave hackers some assistance in finding out all about a person and then trying to use that to guess their master password. If customers had used long and complex master passwords, they were safe. But much of that information was a matter of public records. We all share lots of personal data with retailers.

TraderGary · 2026-07-28T10:41:45-0400

kelper said:
The problem was that only passwords and secure notes were encrypted. The hackers got access to customer profiles which included names, addresses, email addresses and telephone numbers. This data gave hackers some assistance in finding out all about a person and then trying to use that to guess their master password. If customers had used long and complex master passwords, they were safe. But much of that information was a matter of public records. We all share lots of personal data with retailers.

It was at that point that I switched to a password manager that encrypts everything. There are many good ones that do. I chose 1Password.

bikemanAMD · 2026-07-28T11:54:45-0400

Previously used LastPass Free back in 2018, Switched to Roboform Password Manager and paid for a few years at the start, and then renewed in 2025 til 2028. Seems to work well for my needs thus far, Master Password only secured in my brain, and have a Emergency Backup setup on my Galaxy S25 phone if i should ever forget the Master Password.

Gave up on LastPass after the news broke of another data breach back in the past

kelper · 2026-07-28T12:13:54-0400

I loved last pass because it could go to a website and automatically update your password.

OldNavy · 2026-07-28T12:41:30-0400

Bitwarden for me.
Works well and cheap.

PerpetualCycle · 2026-07-28T14:35:50-0400

Pen and paper for me for my critical passwords. Who would have thought p&p would be the most secure way to store your passwords?

TraderGary · 2026-07-28T15:07:15-0400

PerpetualCycle said:
Pen and paper for me for my critical passwords. Who would have thought p&p would be the most secure way to store your passwords?

I understand how 1Password works, so personally I would never trust my security to paper and pencil. I don't want my financial passwords written down anywhere!

XxXxX · 2026-07-28T15:41:43-0400

i have all passwords saved within the browser password manager, which is password protected on an encrypted drive
i use a authenticator browser extension for all 2FA and have Proton authenticator installed as a backup.

the system is setup with a PIN and has passkeys enabled.
if they are coming to get me then let them come on down and get me.

best of luck Steve ..

Solved LastPass hit by new data breach - 4 steps you should take now

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Stock Market Wizard

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Stock Market Wizard

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Syzygy

My Computers My Computers

At a glance

At a glance

Stock Market Wizard

My Computers My Computers

At a glance

At a glance

Just a Computer User

My Computers My Computers

At a glance

At a glance

Similar threads

My Computers

My Computer

My Computers

My Computers

My Computers

My Computers

My Computers

My Computers

My Computers

My Computers

My Computer

My Computers

My Computers

My Computers