LastPass again suffered from a data security breach after an unauthorized party gained the access to a cloud-based password security site.
Although the third-party cloud provider wasn't identified, Amazon Web Services mentioned the company's migration of a billion customer records to its cloud in a blog post from 2020.
No customer data or encrypted passwords were accessed.
Source: https://techcrunch.com/2022/11/30/lastpass-goto-breached-customer-information/
TPRM report: https://scoringcyber.rankiteo.com/company/lastpass
"id": "las214211222",
"linkid": "lastpass",
"type": "Breach",
"date": "12/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'A billion customer records',
'industry': 'Technology',
'name': 'LastPass',
'type': 'Company'}],
'attack_vector': 'Unauthorized access',
'data_breach': {'data_encryption': 'Encrypted passwords'},
'description': 'LastPass suffered from a data security breach after an '
'unauthorized party gained access to a cloud-based password '
'security site.',
'impact': {'data_compromised': 'No customer data or encrypted passwords were '
'accessed.'},
'references': [{'source': 'Amazon Web Services blog post from 2020'}],
'threat_actor': 'Unauthorized party',
'title': 'LastPass Data Security Breach',
'type': 'Data Breach'}