Solved The LastPass breach settlement is real. Here’s what you should know

Steve C · 2026-06-26T02:21:31-0400

Stigg said:
Is anyone still living on the edge with LastPass?

LastPass confirms data breach in Klue supply chain attack

LastPass announced that hackers accessed customer data from its Salesforce environment after stealing the company's OAuth tokens in the Klue supply chain attack earlier this month.

www.bleepingcomputer.com

How embarassing for a cyber security firm

Stigg · 2026-06-26T02:47:45-0400

Steve C said:
How embarrassing for a cyber security firm

I wouldn't be surprised to see LastPass shut down.
The security breaches and their explanations over the years are ludicrous.

kelper · 2026-06-26T07:20:56-0400

Why? No passwords were ever revealed.

cheaterslick · 2026-06-26T07:42:47-0400

kelper said:
Why? No passwords were ever revealed.

Who needs passwords...

According to LastPass, the following data may have been exposed:

Customer names

Phone numbers

Email addresses

Physical addresses

Support case information

Sales/CRM-related data

kelper · 2026-06-26T07:47:58-0400

cheaterslick said:
According to LastPass, the following data may have been exposed:

Customer names

Phone numbers

Email addresses

Physical addresses

Support case information

Sales/CRM-related data

As I said, no passwords; all that other data is already all over the dark web.

cheaterslick · 2026-06-26T08:04:56-0400

kelper said:
As I said, no passwords; all that other data is already all over the dark web.

That's semantics and you know it. The kind of data that passwords were meant to protect.

If people want to be 'fully protected' then stay off the internet. And even then it doesn't matter much, right?

Stigg · 2026-06-27T03:12:42-0400

kelper said:
Why? No passwords were ever revealed.

I guess that'll be a decision for all individuals that still use LastPass whether they're comfortable with all the breaches.

kelper · 2026-06-27T03:16:35-0400

Stigg said:
I guess that'll be a decision for all individuals that still use LastPass whether they're comfortable with all the breaches.

Yes. I changed from LastPass to RoboForm but it is not quite as good. I'm trying Bitwarden too.

Edwin · 2026-06-27T06:33:13-0400

Does it ever stop!?!?!?
Constant targets, these corporations!!!
My Hilroy Cahier d'exercices has never been targeted.

hader · 2026-06-27T08:12:21-0400

Well I make at one time make use of their services. It was free. Then there came an investor onboard and suddenly demanded a yearly fee. It was quite amount and I didn't use their program anymore. Last year they were cleaning old stuff so they deleted my data. I had made an export of my data earlier so I could always look inside the file if I had forgotten it. They claimed that my data was encrypted with my main password that nobody knew. Even they didn't knew my password. So if I forgot my main password... All my data was not obtainable anymore. Even they can not do anything about it.

If this true than those hackers may got customers data but it's useless for them if everything is encrypted. with many passwords they don't know. To crack many mini-databases with unknown passwords is not worth the effort. They hoped to break-in and steal readable data from their database. A quick win.

That having said; It is quite embarrassing that such a company had a break in.... Especially that they are safeguarding customers data.
There may be a cause that lies underneath it all. And I found clues lying around everywhere.
- Patching. Software not matter how good it is ,always has some flaws. Some are discovered and become a zero-day exploit. The manufactures of the software fixes these faults any bring out a patch. The last step is to patching the software. Company's are responsible for doing this. I they find it not that important because patching software costs manhours and so money.... Those investors are interested in one thing only; making more money and hate spending money. I have seen one awful incident here in my country of a break-in of a telephone provider. They found a way inside their IT systems (where their system patched till the latest vulnerability? I suspect: No. I they were, this break-in could not occur. Those hackers are using just those zeroday-exploits.), encrypted everything with ransomware. They refused to pay after listening to a several attempts of the hackers demands. So they threw all data onto the streets and anyone on Telegram could buy the data in order to misuse it. Some 6,2 ~6,4 million users where involved here. This company wrote it's own dead sentence!!! Customers went to other providers.... They should have paid and investigated thoroughly what went wrong inside their infrastructure in order to prevent future break-ins. There can be a weak spot in their infrastructure.
- AI. This is a more worrisome issue. AI can be so clever that it can analyse software and spot weaknesses. Software company's can review their software and solve these potential weaknesses. But.... The hackers can use this also to find exploits in software in order to break-in. Due to this all I predict we will see a rise of the number of break-ins... Lastpass now, an other company's tomorrow....

cheaterslick · 2026-06-27T08:17:34-0400

kelper said:
I'm trying Bitwarden too.

I use Bitwarden on another machine and I think it's only a matter of time before AI helps the bad guys figure out a way to hack that one, too.

It wasn't too long ago that these password managers were considered a God-send. I shouldn't have believed the hype back then. Now the game has changed. It's sad and depressing.

gunrunnerjohn · 2026-06-27T09:30:29-0400

cheaterslick said:
I use Bitwarden on another machine and I think it's only a matter of time before AI helps the bad guys figure out a way to hack that one, too.

It wasn't too long ago that these password managers were considered a God-send. I shouldn't have believed the hype back then. Now the game has changed. It's sad and depressing.

It's more of a Return-On-Investment decision whether they want to invest the time and resources cracking individual user password vaults.

kelper · 2026-06-27T09:38:32-0400

So long as my passwords are salted before hashing, I am happy. In some ways, closed source might be best.

cheaterslick · 2026-06-27T10:24:49-0400

gunrunnerjohn said:
It's more of a Return-On-Investment decision whether they want to invest the time and resources cracking individual user password vaults.

If it's a massive breach then they can take their time to pick & choose who they want to.

It's not just one hacker guy, ya know. It could be some massive boiler-rooms in Russia and China with dozens of people organized to look for what they want to look at.

It all adds up.

KevTech · 2026-06-27T10:48:55-0400

All the cloud-based password managers are at risk in one way or another.

When Lastpass had their first breach in 2011 I decided then that this online password storage is no longer safe and went to Keepass which the database in only on my PC.

Edwin · 2026-06-27T11:10:21-0400

There wouldn't be any breaches at all if everybody would just write their frickin passwords down in a notebook!!!

HeavyHemi · 2026-06-27T13:38:07-0400

Edwin said:
There wouldn't be any breaches at all if everybody would just write their frickin passwords down in a notebook!!!

Wait a minute...

Solved The LastPass breach settlement is real. Here’s what you should know

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

♦ ♦

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

♦ ♦

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

My Computer

My Computers

My Computers

My Computers

My Computers

My Computers

My Computers

My Computers

My Computers

My Computers

My Computers

My Computers

My Computers

My Computers

My Computer

My Computers

My Computer