LastPass, the company of the well-known password manager, has announced that it has been a victim of hackers two weeks ago. Still, it can reassure users as no stored passwords have fallen into the hands of the criminals.
lastpass hack
LastPass CEO Karim Toubba reveals the facts herself in a blog post. In it, the CEO only says that strange activities were detected in the developer environment of LastPass two weeks ago. The facts were then investigated and no evidence was found that cyber criminals also had access to LastPass’s encrypted vault with passwords.
“We determined that an unauthorized party gained access to parts of the LastPass developer environment, thanks to one hacked developer account. The party got away with some of the source code and confidential technical information from LastPass .”
In response to the security incident, LastPass has taken steps to strengthen the security of its developer platform. Furthermore, Toubba assures users that no additional actions are required on their part, such as changing passwords or master password. Although it is of course recommended from a security point of view to change your passwords regularly.
Be alert
Notably, Toubba discusses what data the criminals stole in his blog post, but it’s not clear whether the source code was actually the original target. He does not rule out in the blog post that the malicious parties were indeed after the passwords of users. LastPass also does not state whether the data the hackers got their hands on could also give them an advantage in a subsequent attack.
If you still want to change your passwords, it is best to look at these tips for a strong password. If you know that you are rather sloppy with online security, read these tips. Last year, LastPass sent out a false notification warning users who had allegedly been hacked.
– Thanks for information from Androidworld. Source