Lastpass security breach blog post — AI summarised

Last­Pass, a pass­word man­age­ment com­pany, has released an update regard­ing the secur­ity incid­ent it dis­closed on Decem­ber 22, 2022. The com­pany has com­pleted its invest­ig­a­tion and found no threat-act­or activ­ity since Octo­ber 26, 2022. The incid­ents were caused by third-party soft­ware vul­ner­ab­il­ity, and the threat act­or accessed non-pro­duc­tion devel­op­ment and backup stor­age envir­on­ments. Last­Pass pro­pri­et­ary data and cus­tom­er data were stolen, includ­ing on-demand cloud-based devel­op­ment, source code repos­it­or­ies, intern­al scripts, intern­al doc­u­ment­a­tion, devOps secrets, cloud-based backup stor­age, and backups of all cus­tom­er vault data. The com­pany has imple­men­ted addi­tion­al secur­ity meas­ures to harden its secur­ity while improv­ing over­all secur­ity oper­a­tions. The update also includes recom­men­ded actions for cus­tom­ers to pro­tect them­selves or their businesses.