LastPass security breach linked to $35 million stolen in crypto heists
www.theverge.com
Researchers found that almost every victim was a LastPass user.

More than $35 million has been stolen from over 150 victims since December — ‘nearly every victim’ was a LastPass user::Security experts believe some of the LastPass password vaults stolen during a security breach last year have now been cracked open following a string of cryptocurrency heists

  • GreenBottles@lemmy.worldEnglish
    111·
    2 years ago

    I’d be willing to bet that people store their key phrases in the notes section in LastPass which was not encrypted at rest

    • hatchling@lemmy.worldEnglish
      5·
      2 years ago

      This is incorrect information. Notes are encrypted, just not their “type”. Unfortunately the most direct source for this is a reddit link, but here it is anyway.