4 ms·
Title should be edited to be more specific: "[W]e have found no evidence that encrypted user vault data was taken, nor that LastPass user accounts were accesse
by Asparagirl 11y ago
Title should be edited to be more specific:
"[W]e have found no evidence that encrypted user vault data was taken, nor that LastPass user accounts were accessed. The investigation has shown, however, that LastPass account email addresses, password reminders, server per user salts, and authentication hashes were compromised."
So, a breach of LastPass itself but not a breach of its users' non-LastPass per-website passwords/data.