Hack in password manager LastPass did not expose users' data: CEO - New Delhi News

New Delhi, Sep 18 (IANS) The CEO of popular encrypted password manager LastPass has said that the hacking episode last month did not involve any access to customers' data or encrypted password vaults.

by IANS | Updated Sep 18, 2022

Hack in password manager LastPass did not expose users' data: CEO - New Delhi News

In a latest statement, Karim Toubba, CEO of LastPass admitted that the security breach in August had internal access to the company's systems for four days until they were detected and evicted.

"Our investigation revealed that the threat actor's activity was limited to a four-day period in August 2022. During this timeframe, the LastPass security team detected the threat actor's activity and then contained the incident," Toubba said.

The investigation found that the threat actor gained access to the platform's development environment using a developer's compromised endpoint.

The threat actor utilised their persistent access to impersonate the developer once the developer had successfully authenticated using multi-factor authentication.

"Although the threat actor was able to access the Development environment, our system design and controls prevented the threat actor from accessing any customer data or encrypted password vaults," said the CEO.

LastPass is a freemium password manager that stores encrypted passwords online.

The CEO said that LastPass does not have any access to the master passwords of its customers' vaults.

"Without the master password, it is not possible for anyone other than the owner of a vault to decrypt vault data as part of our Zero Knowledge security model," he mentioned.

The company said it has deployed enhanced security controls, including additional endpoint security controls and monitoring after the incident.

Disclaimer: This story is auto-aggregated by a computer program and has not been created or edited by FreshersLIVE.Publisher : IANS-Media

Related Articles

  • PM Modi set to gift 5G services to Indians on Oct 1 (Lead)
  • At 264%, India logs fastest growth in global IoT module market
  • DRAM chip prices forecast to drop 13-18% in Q4 2022
  • Instagram rolls out longer uninterrupted Stories for users
  • Apple set to launch new MacBook Pro models as suppliers gear up
  • Agnikul to launch Agnibaan rocket before 2022
  • More than 1 in 2 senior business executives see recession looming: Report
  • US opens probe into alleged patent violations by Samsung
  • Air pollution amplifying negative effects of climate change: Indian-origin researcher
  • Weather may play spoilsport as NASA prepares again for Moon mission launch