We hate to be the bearer of bad news, but LastPass, one of the most popular password managers, has been hacked!

LastPass made the announcement in this blog post:

“We want to notify our community that on Friday, our team discovered and blocked suspicious activity on our network. In our investigation, we have found no evidence that encrypted user vault data was taken, nor that LastPass user accounts were accessed. The investigation has shown, however, that LastPass account email addresses, password reminders, server per user salts, and authentication hashes were compromised.”

 

“However, if you have reused your master password on any other website, you should replace the passwords on those other websites.”

You heard ’em folks.  Change your master password immediately! Better safe than hacked!

 

For more information, here are some news articles about the incident:

The Register – LastPass got hacked: Change your master password NOW

LifeHacker.com – LastPass Hacked, Change Your Master Password Now

Business Insider – One of the most popular security password companies just admitted it was hacked 

CNN Money – Irony Alert: Password-storing company is hacked

 

The Security Awareness Company

With over 25 years of industry experience, we serve both small & large organizations to create successful security awareness and compliance programs on an international scale. Our team is a strong, creative powerhouse with a passionate vision and we consistently produce on-trend end-user training materials of the highest caliber.

Latest posts by The Security Awareness Company (see all)