{"id":18725,"date":"2026-06-24T18:45:21","date_gmt":"2026-06-24T17:45:21","guid":{"rendered":"https:\/\/innovatenews.site\/index.php\/2026\/06\/24\/lastpass-notifies-users-of-yet-another-data-breach\/"},"modified":"2026-06-24T18:45:22","modified_gmt":"2026-06-24T17:45:22","slug":"lastpass-notifies-users-of-yet-another-data-breach","status":"publish","type":"post","link":"https:\/\/innovatenews.site\/index.php\/2026\/06\/24\/lastpass-notifies-users-of-yet-another-data-breach\/","title":{"rendered":"LastPass notifies users of yet another data breach"},"content":{"rendered":"
\n

The topic LastPass notifies users of yet another data breach<\/strong> is currently the subject of lively discussion \u2014 readers and analysts are keeping a close eye on developments.<\/p>\n

This is taking place in a dynamic environment: companies\u2019 decisions and competitors\u2019 reactions can quickly change the picture.<\/p>\n

LastPass users are once again being warned about stolen personal data, though this time the breach happened through one of the company\u2019s outside partners. Here are the details.<\/p>\n

As reported by TechCrunch, LastPass is emailing users affected by a breach at market research firm Klue, which allowed hackers to access customer information and support case data.<\/p>\n

\"\"<\/figure>\n

The news came as LastPass shared more information on a blog post, where it explained:<\/p>\n

The information accessed was limited to standard business contact information and related customer relationship management (CRM) data, including customer names, phone numbers, email addresses, and physical addresses, as well as support case data and sales-related data.<\/p>\n

LastPass said that upon learning about the incident, the company revoked employee access to Klue, rotated the exposed API tokens, notified law enforcement, and launched \u201ca detailed investigation into the scope of the event, working with our contacts at both Klue and Salesforce.\u201d<\/p>\n

The company explains that Klue\u2019s platform integrates with Salesforce and Gong systems.<\/p>\n

As a result, LastPass is recommending that customers \u201cremain vigilant of potential phishing attacks or social engineering attempts\u201d leveraging the compromised information. LastPass also shared the following IP addresses and email sender domains associated with the attackers, which companies can use to search for related activity in their systems:<\/p>\n

This is the latest in a series of security incidents affecting LastPass. In 2015, hackers obtained account email addresses, password reminders, authentication hashes, and cryptographic salts, although LastPass said encrypted vault data was not accessed.<\/p>\n

In 2022, an attacker compromised a developer account and stole source code and technical information. The attacker later used that information to access cloud backups containing customer records and encrypted password vaults, along with unencrypted details such as names, billing addresses, email addresses, and phone numbers\u2060.<\/p>\n

To learn more about the Klue breach and LastPass\u2019s response, follow this link.<\/p>\n