LastPass confirms data breach in Klue supply chain attack

(bleepingcomputer.com)

17 points | by thm 15 hours ago

7 comments

  • hydrogen7800 10 hours ago

    I've never been able to access my old LastPass vault to delete its contents since its first breach when I switched to bitwarden. I recall contacting them to make sure my data was erased, but I never got a good confirmation of that.

    • uhh 11 hours ago

      I assume anyone still using LastPass in 2026 is actively trying to give up their data.

      • blinded 15 hours ago

        They lost some of my secrets a few years ago. Swapped to 1password, never looked back.

        They went downhill after they got purchased.

        • nosioptar 9 hours ago

          I'm happy with KeePass forks and syncthing.

          • buffer_overlord 15 hours ago

            I switched to bitwarden about 10 years ago

            • suprjami 10 hours ago

              Once again, it's called LastPass because it should be the last choice when selecting a password manager.

              • downrightmike 14 hours ago

                LastPass announced that hackers accessed customer data from its Salesforce environment after stealing the company's OAuth tokens in the Klue supply chain attack earlier this month.