LastPass was breached again. The attackers gained access using information obtained in the August 2022 incident. GoTo, LastPass’s affiliate, reported unusual activity in its development environment and in a third-party cloud storage service it shares with LastPass, and brought in Mandiant. Cleaning up after an incident is a complicated task.
Update 2022-12-22: The attackers also copied a backup of the encrypted customer vaults, and a follow-up in January covers Wladimir Palant’s analysis of it.