Lastpass got hacked

[nRiTeCh]

Received this email from Lastpass today and its all over the net..

LastPass Admits to Severe Data Breach, Encrypted Password Vaults Stolen

August 2022 security breach at popular password management service LastPass was worse than originally reported.

thehackernews.com

LastPass users: Your info and password vault data are now in hackers’ hands

Password manager says breach it disclosed in August was much worse than thought.

arstechnica.com

LastPass says hackers stole customers' password vaults

The password manager giant said hackers stole both encrypted and unencrypted customer data, including password vaults.

techcrunch.com

 

[lockhrt999]

Cool.

It's okay because LastPass customer don't mind hacks. They never did.

 

[kartikoli]

Cool.

It's okay because LastPass customer don't mind hacks. They never did.

lol Thankfully my company uses 1password.com so no extra work for us changing passwords for every resource

 

[technofast]

Recently signed up for Bitwarden but seems nothing is safe online.

 

[belictony]

How many times will it get hacked? How many times they will say it’s encrypted customer data?

Doesn’t make sense

 

[Pyception]

Any online/cloud service is going to be security vulnerable only question is ability to grasp and recovery.

 

[kartikoli]

my company uses 1password.com so we are safe else would have to start changing passwords for all those shared resources.

 

[animishticomb]

my company uses 1password.com so we are safe else would have to start changing passwords for all those shared resources.

should we tell him?

 

[kartikoli]

should we tell him?

hahahahaah I guess I'll have to only change password for 2~3 resources but the admins would start cursing

 

[blr_p]

How many times will it get hacked? How many times they will say it’s encrypted customer data?

Doesn’t make sense

It means even if they got hacked it will take a long time to actually break the encryption. At least they bothered to inform the public.

Always a good idea to change passwords which should not be hard since you don't need to remember them

After that you're good. Continue as is.

 

[itachim17]

keepass still the best, store everything locally like a cold wallet