LastPass discloses another data breach via Klue supply chain attack, customer data exposed (opens in new tab)

Another day, another data breach for the widely-known password manager… During their investigation, LastPass found that an unauthorized party obtained OAuth authorization tokens managed by Klue for several clients. Using these tokens, the threat actor was able to access customer data that LastPass maintained within its At this stage, the data accessed was limited to business contact information and basic customer relationship management records, such as customer names, phone numbers, email ad...