Post

LastPass users are once again being warned about stolen personal data, though this time the breach happened through one of the company’s outside partners. Here are the details.

LastPass says password vaults not affected

As reported by TechCrunch , LastPass is emailing users affected by a breach at market research firm Klue , which allowed hackers to access customer information and support case data.

The news came as LastPass shared more information on a blog post , where it explained:

The information accessed was limited to standard business contact information and related customer relationship management (CRM) data, including customer names, phone numbers, email addresses, and physical addresses, as well as support case data and sales-related data.

LastPass said that upon learning about the incident, the company revoked employee access to Klue, rotated the exposed API tokens, notified law enforcement, and launched “a detailed investigation into the scope of the event, working with our contacts at both Klue and Salesforce.”