TechSower

Nothing like a Microsoft outage to keep you on your toes.

Password Manager and Vault App, Last Pass recently had a second data breach, and they recently presented data on the Incident Report. Along with the encrypted Backup Data which has been acquired by the unauthorized party, were unencrypted data like Customer Account Information, Company Names, end-User Names, Billing Addresses, website addresses, email addresses, telephone numbers and IP address information.

LastPass is suggesting that it would take millions of years to unencrypt data as of December 2022. This also means that users can be targeted by social engineering or phishing attacks, and it is important to note that LastPass will never call, email, or text you to verify your personal information. Other than when signing into your vault from a LastPass client and LastPass will never ask you for your master password.