LastPass says it was breached — once more • TechCrunch

Password supervisor LassPass mentioned its programs have been compromised for the second time this yr.

LastPass chief govt Karim Toubba mentioned in a weblog submit that an “unauthorized get together” not too long ago gained entry to some clients’ info saved in a third-party cloud service shared by LastPass and its guardian firm, GoTo. Toubba mentioned the unauthorized get together used info stolen from LastPass’ programs in August, which the corporate disclosed on the time.

Toubba didn’t say what particular buyer info was taken, however mentioned it was working to “perceive the scope of the incident and determine what particular info has been accessed.”

GoTo, previously LogMeIn which acquired LastPass in 2015, mentioned in a equally imprecise assertion that it was investigating the incident. It’s not but clear if each LogMeIn and GoTo clients are affected by the breach.

LastPass mentioned in August that an unauthorized get together “gained entry to parts of the LastPass growth surroundings by way of a single compromised developer account and took parts of supply code and a few proprietary LastPass technical info.” LastPass mentioned that its system design and controls “prevented the menace actor from accessing any buyer knowledge or encrypted password vaults.”

Toubba added within the weblog submit Wednesday that “clients’ passwords stay safely encrypted.”

GoTo spokesperson Elizabeth Bassler declined to remark past LastPass’ weblog submit.