Security · 1h ago
LastPass customer data exposed via Klue supply chain attack
LastPass confirmed hackers accessed customer data from its Salesforce environment after stealing OAuth tokens in the Klue supply chain attack. The breach exposed customer names, email addresses, and billing details. LastPass said no encrypted vaults or master passwords were compromised.
Meridian48 take
The breach underscores the risk of third-party integrations, even for security-focused companies like LastPass.
Read the full reporting
LastPass confirms data breach in Klue supply chain attack →
Bleeping Computer
lastpasssupply-chain-attack