Password app company LastPass has reported a second data breach that may be related to a previous breach in August where source code and some proprietary LastPass technical information were taken.
The company has reported that in this most recent attack, a threat actor using information from August’s attack accessed “certain elements of our customers’ information.” LastPass says, however, that customers’ passwords remain safely encrypted, its services remain fully functional, and it is currently working to discover the scope of the attack and what information has been accessed.
The advice from LastPass is to follow its best practices around setup and configuration of LastPass as detailed here: https://blog.lastpass.com/2022/01/how-to-set-up-your-new-lastpass-account/
As key project members in many of our IT projects whether, actively assisted or simply advised what they do not know about IT, in our opinion isn’t worth knowing!
- Nadia Mullins-Hills -