Janu– Steve Gibson states that “many listeners” of his podcast had only 1 hashing iteration in their LastPass vaults.

Decem– 1Password claims that most LastPass vaults could theoretically be cracked with merely $100 of computing power.

Decem– Wladimir Palant exposes misleading claims in LastPass’s December 22 statement.

Decem– LastPass again revises statement, detailing that sensitive customer data had been accessed, along with backups of customer vaults containing both unencrypted and encrypted data.

Novem– LastPass revises statement, says “certain elements of… customers’ information” had also been accessed.

Aug– LastPass releases advisory, states hackers accessed “proprietary… technical information” via a compromised LastPass developer account claims breach was contained.

Aug– BleepingComputer contacts LastPass about the alleged breach, receives no reply.early/mid-August 2022 – LastPass was hacked BleepingComputer learns of breach from “insiders”.Third-party experts (and competitors) weigh in.What we know so far about the LastPass breach.

We’ll also discuss how this impacts existing LastPass users, and whether it’s still safe to use LastPass. Subsequent updates from LastPass have revealed new information as the company’s investigation of the breach has continued.įollowing is a timeline of events, and everything we know so far about the LastPass security breach. News outlet BleepingComputer became aware in August 2022 that LastPass had suffered a security breach. LastPass develops a popular password manager app by the same name. Over the past several weeks, news of a security breach at LastPass has gone from bad, to worse, to terrible. Security & Privacy LastPass password manager suffers massive data breach

Lastpass security