LastPass user data stolen by hackers again (opens in new tab)

Password manager LastPass says a supply chain attack involving third-party vendor Klue exposed customer contact and support information, though customer vaults and stored credentials were not affected.Exposed customer data could fuel phishing attacksAn unauthorized actor accessed LastPass's Salesforce environment using OAuth tokens stolen from third-party vendor Klue. The breach exposed sensitive customer details including names, phone numbers, and support records.The incident was limited to ...