LastPass claimed that there is no evidence of a data breach. Many users had indeed reported unauthorized login attempts. The password manager, however, claims that there has been no hacker attack and that nothing has been compromised. Here are all the details.
What happened to LastPass?
Nikolett Bacso-Albaum, the senior director of LogMeIn Global PR, initially told The Verge that the alerts users received were related to “fairly common bot-related activities.” The latter involve malicious attempts to access accounts LastPass using email addresses and passwords that outside people have obtained from past breaches of third party services. The Director stated:
It is important to note that we have no evidence that accounts have been successfully hacked or that the LastPass service has been compromised by unauthorized persons. We regularly monitor this type of activity and will continue to take steps to protect users and their data.
However, late Tuesday night, LastPass’s Vice President of Product Management, Dan DeMichele, released a new statement to The Verge. DeMichele states that some of the warnings were “probably activated by mistake”, due to a problem that LastPass has now solved.
Reports started popping up on the Hacker News forum after a LastPass user created a post for highlight the problem. He claims that LastPass warned him of a attempted access from Brazil using his master password.
Various users responded quickly to post, pointing out that he has experienced something similar. It is therefore understandable that many have been afraid.
Even if the company and site have not actually been compromised, it is still advisable fortify your account with themultifactor authentication. The latter uses external sources to verify your identity before logging into your account.