LastPass security breach linked to $35 million stolen in crypto heists
www.theverge.com
Researchers found that almost every victim was a LastPass user.

More than $35 million has been stolen from over 150 victims since December — ‘nearly every victim’ was a LastPass user::Security experts believe some of the LastPass password vaults stolen during a security breach last year have now been cracked open following a string of cryptocurrency heists

  • @[email protected]English
    8•1 year ago

    So just change whatever passwords you had saved to LastPass. That would mitigate any issues, right?

    • @[email protected]English
      3•1 year ago

      Pretty much. Though also any security questions or other private info you have saved, some of which is much more annoying to protect.

      Though one annoying thing is that even if you change everything, what they find might help them social engineer an attack.

      I second Bitwarden, BTW. Best password manager I’ve used.

    • 10EXPEnglish
      1•1 year ago

      Your username gives me PTSD for past Hades speedruns and I hate it.

    • meseek #2982English
      1•1 year ago

      Just. It’s not an insurmountable problem, but I wouldn’t be happy changing the login details, one by one, on the some 80 websites I have in my vault.

      Not to mention if you’re using an email anonymizer, you’ll have to regenerate new emails for them all too. I guess you could do it on demand, but knowing my batch of emails in floating around the dark web doesn’t sit well with me. Worse yet if it’s your actual email, then they have that now.