I would like to see categories added, I do like that in BW. The only reason I use BitWarden as well is for redundancy. That used to be true but now that they added 2FA and notes there isn’t much of a difference and, in Apple slickness, the 2FA integration is one tap seamless. In the meantime, LastPass products and services remain 'fully functional,' said Toubba. GoTo, formerly LogMeIn, said it was also investigating the incident, although it did not explain whether GoTo users were also impacted by the hack. LastPass is currently working to understand the scope of Wednesday's incident and identify what specific information has been accessed. LastPass said at the time that its systems 'prevented the threat actor from accessing any customer data or encrypted password vaults.'

Our customers' passwords remain safely encrypted due to LastPass’s Zero Knowledge architecture.Īccording to a blog post dated August 22, the previous incident saw a threat actor gain access to the LastPass Development environment using a developer's compromised endpoint to steal source code and some proprietary LastPass technical information. We have determined that an unauthorized party, using information obtained in the August 2022 incident, was able to gain access to certain elements of our customers' information. We immediately launched an investigation, engaged Mandiant, a leading security firm, and alerted law enforcement. We recently detected unusual activity within a third-party cloud storage service, which is currently shared by both LastPass and its affiliate, GoTo. Toubba added in the blog post that 'customers' passwords remain safely encrypted.'

Toubba said the hackers used information stolen from LastPass' systems in a separate previously disclosed incident that occurred in August of this year. The information was stored in a third-party cloud service shared by LastPass and parent company GoTo, said LastPass CEO Karim Toubba in a blog post. Password management app LastPass says it is investigating a security incident after an 'unauthorized party' compromised its systems on Wednesday and gained access to some customer information.

Lastpass march 16