LastPass DevOps Engineer Breached To Steal Password Vault Data

LastPass DevOps engineers were compromised because they had access to the decryption keys. LastPass detailed an “organized second attack” in which a threat actor took data from Amazon AWS cloud storage servers for two months. Threat actors obtained partially encrypted password vault data and customer data from LastPass in December. The well-known password manager LastPass […]

access actor amazon amazon aws attack aws aws cloud breached breaches ciso cloud cloud storage compromised customer customer data data data protection december decryption decryption keys devops devops engineer encrypted engineer engineers hacking identity and access management (iam) keys lastpass malware and vulnerabilities manager news & analysis password password manager password vault servers steal storage strategy and planning threat threat actor threat actors threat intelligence vault well-known