LastPass user data stolen by hackers again

Password manager LastPass says a supply chain attack involving third-party vendor Klue exposed customer contact and support information, though customer vaults and stored credentials were not affected.


An unauthorized actor accessed LastPass's Salesforce environment using OAuth tokens stolen from third-party vendor Klue. The breach exposed sensitive customer details including names, phone numbers, and support records.

The incident was limited to systems integrated with Klue and didn't affect LastPass products, infrastructure, or services.

Klue disclosed on June 22 that someone | Discuss on our Forums