City
Epaper

Password manager LastPass hacked again for 2nd time this yeay

By IANS | Updated: December 1, 2022 10:55 IST

New Delhi, Dec 1 Karim Toubba, the CEO of popular encrypted password manager LastPass, has admitted the company ...

Open in App

New Delhi, Dec 1 Karim Toubba, the CEO of popular encrypted password manager LastPass, has admitted the company is investigating a security incident after its systems were compromised for the second time this year.

The company detected unusual activity within a third-party cloud storage service, which is currently shared by both LastPass and its affiliate, GoTo.

"We immediately launched an investigation, engaged Mandiant, a leading security firm, and alerted law enforcement," Toubba said in a statement late on Wednesday.

The earlier security breach in August this year had allowed hackers internal access to the company's systems for four days until they were detected and evicted.

Toubba said that an unauthorised party, using information obtained in the August 2022 incident, was again able to gain access to certain elements of "our customers' information".

"Our customers' passwords remain safely encrypted due to LastPass's Zero Knowledge architecture," said the CEO.

"We are working diligently to understand the scope of the incident and identify what specific information has been accessed. In the meantime, we can confirm that LastPass products and services remain fully functional," he informed.

LastPass is a freemium password manager that stores encrypted passwords online.

The company does not have any access to the master passwords of its customers' vaults.

"Without the master password, it is not possible for anyone other than the owner of a vault to decrypt vault data as part of our Zero Knowledge security model," according to the CEO.

He said that the company continues to deploy enhanced security measures and monitoring capabilities across its infrastructure to help detect and prevent further threat actor activity.

Disclaimer: This post has been auto-published from an agency feed without any modifications to the text and has not been reviewed by an editor

Tags: Karim toubba
Open in App

Related Stories

TechnologyOver 6K customer accounts breached, admits Norton LifeLock

TechnologyHackers copied a backup of customer vault data, admits LastPass

Technology Realted Stories

TechnologyKarnataka authorities intensify crackdown on bike taxis following HC order, vehicles seized

TechnologySkill development can’t have prescriptive templates: Jayant Chaudhary

TechnologyDifferences surface in Vijayan govt over proposed electronic cluster project

Technology'Cyber Suraksha' exercise launched to strengthen national cyber resilience

TechnologyWhatsApp to start showing ads in updates tab, personal chats to remain unaffected