{"id":458079,"date":"2022-08-26T07:46:00","date_gmt":"2022-08-26T05:46:00","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=458079"},"modified":"2022-08-26T07:51:55","modified_gmt":"2022-08-26T05:51:55","slug":"worlds-biggest-password-manager-hacked","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/458079-worlds-biggest-password-manager-hacked.html","title":{"rendered":"World’s biggest password manager hacked"},"content":{"rendered":"

LastPass, a password manager used by more than 33 million people around the world, said a hacker recently stole source code and proprietary information after breaking into its systems.<\/p>\n

The company doesn\u2019t believe any passwords were taken as part of the breach and users shouldn\u2019t have to take action to secure their accounts, according to\u00a0a blog post<\/a><\/strong>\u00a0on Thursday.<\/p>\n

An investigation determined that an \u201cunauthorised party\u201d cracked into its developer environment, which is the software that employees use to build and maintain LastPass\u2019s product.<\/p>\n

The perpetrators were able to gain access through a single compromised developer\u2019s account, the company said.<\/p>\n

\n
\n

We recently detected unusual activity within portions of the LastPass development environment and have initiated an investigation and deployed containment measures. We have no evidence that this involved any access to customer data. More info:\u00a0https:\/\/t.co\/cV8atRsv6d<\/a>\u00a0pic.twitter.com\/HtPLvK0uEC<\/a><\/p>\n

\u2014 LastPass (@LastPass)\u00a0August 25, 2022<\/a><\/p><\/blockquote>\n<\/div>\n

The attack struck a company that generates and stores hard-to-crack, auto-generated passwords for multiple accounts, like Netflix or Gmail, on behalf of its users \u2014 without the need to manually enter credentials.<\/p>\n

LastPass lists Patagonia, Yelp Inc. and State Farm as customers on its website.<\/p>\n

Cybersecurity website Bleeping Computer\u00a0reported<\/a><\/strong>\u00a0that it had asked LastPass about the breach two weeks ago.<\/p>\n

Allan Liska, an analyst on the Computer Security Incident Response Team at cybersecurity company Recorded Future, said he was impressed with the \u201cspeedy notification\u201d from LastPass.<\/p>\n

\u201cWhile two weeks might seem like a long time to some, it can take a while for incident response teams to fully assess and report on a situation,\u201d he said. \u201cIt will take time to fully determine the extent of any damage that may have been as result of the breach. However, for now it appears to not be client-impacting.\u201d<\/p>\n

LastPass didn\u2019t immediately respond to a request for further comment.<\/p>\n

There was speculation on social media that hackers may be able to access the keys to password vaults after stealing source code and proprietary information.<\/p>\n

\u201cIt is unlikely that the stolen source code will give the criminals access to customer passwords,\u201d Liska said.<\/p>\n

Now read: Plex hacked \u2014 usernames and hashed passwords compromised<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"

LastPass, a password manager used by more than 33 million people around the world, said a hacker recently stole source code and proprietary information after breaking into its systems.<\/p>\n","protected":false},"author":341034,"featured_media":458081,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27],"tags":[26872,461,31054,22994],"class_list":["post-458079","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-data-breach","tag-hacking","tag-lastpass","tag-password-managers"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/458079"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/341034"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=458079"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/458079\/revisions"}],"predecessor-version":[{"id":458083,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/458079\/revisions\/458083"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/458081"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=458079"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=458079"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=458079"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}