The company said they are taking additional measures to ensure the user data remains secure. The investigation has shown, however, that LastPass account email addresses, password reminders, server per user salts, and authentication hashes were compromised," the blog states. "In our investigation, we have found no evidence that encrypted user vault data was taken, nor that LastPass user accounts were accessed. For those not in the know how, authentication hashes tell users they have permission to access the account. It claims the encrypted user data was not stolen, but the breach did expose LastPass account email addresses, password reminders, server per user salts, and authentication hashes. The company has announced in its blogpost that an intrusion was detected to their servers.
Those using LastPass password manager, it's time to change your master password.
0 kommentar(er)
