3 ms·
> Either the master passwords were reused and this is credential stuffing, or there is actually a LastPass breach affecting all users. As you mention yourself
by tgsovlerkhgsel 5y ago
> Either the master passwords were reused and this is credential stuffing, or there is actually a LastPass breach affecting all users.
As you mention yourself at the end, there are other plausible explanations (e.g. malware on the machines).
- vorpalhex 5y agoIf there is a LastPass cache that is not encrypted, that is a breach since it is an application flaw. If it is something like a keylogger, not so much.
- dqv 5y agoThe LastPass extension can be told to remember your master password. They say it's not recommended. We might be seeing the result of people opting to store their master password and something that exploits this.