Again, you can hear the sigh of relief from LastPass users who might have been concerned that their passwords might have fallen into the wrong hands. LastPass says that the incident occurred in its development environment, and has seen no evidence of any unauthorised access to encrypted vault data. Has any data within my vault or my users’ vaults been compromised?

If you never store or have knowledge of a piece of data, and can't access it yourself, then it also can't be stolen from you.Ģ. LastPass doesn't store users' master passwords. Has my Master password or the Master Password of my users been compromised? In a brief FAQ the company addresses questions that will probably be foremost in the minds of its approximately 25 million users. Our products and services are operating normally.' 'We have determined that an unauthorized party gained access to portions of the LastPass development environment through a single compromised developer account and took portions of source code and some proprietary LastPass technical information. In a blog post revealing the security incident, LastPass CEO Karim Toubba announced that two weeks ago the company detected 'some unusual activity within portions of the LastPass development environment.' Although the breach is clearly not good news, the company says that there is no evidence that the attackers were able to access customer data or encrypted password vaults. LastPass, the popular password manager used by millions of people around the world, has announced that it suffered a security breach two weeks ago that saw attackers break into its systems and steal information.īut don't panic just yet - that doesn't mean that all of your passwords are now in the hands of internet criminals.

Lastpass password vault