The threat actors became aware that only four LastPass DevOps engineers possessed access to decryption keys, the threat actors then proceeded to focus on one of the engineers.
Part of the stolen data included partially encrypted password vault data and customer information. The threat actors leveraged data obtained from the first breach in August 2022, to access collected and exfiltrated data from August 12th, 2022, to October 26th, 2022. LastPass provided additional details about a "coordinated secondary breach," during which an unauthorized actor gained entry into and exfiltrated data from the company's Amazon AWS cloud storage servers for over two months. LastPass: New Details Emerge from Second Security Breach of 2022 Category: Data Breach | Industry: Technology | Level: Strategic | Source: LastPass
0 kommentar(er)
