#Lastpass security breach 2023 full#

That’s nearly a year after the hackers went after LastPass. The anonymous Connor lost $3.4 million worth of crypto on August 27th, 2023. ‘I had it in a bank security deposit box before that, but then I started thinking, ‘Hey, the bank might close or burn down and I could lose my seed phrase.”

‘I thought at the time that the bigger risk was losing a piece of paper with my seed phrase on it,’ Connor said. Monahan concluded in late August that the only common thread was the use of LastPass to protect the seed phrases.

#Lastpass security breach 2023 full#

They are also deeply integrated into this ecosystem, employees of reputable crypto orgs, VCs, people who built DeFi protocols, deploy contracts, run full nodes.’ ‘The victim profile remains the most striking thing,’ Monahan wrote. She explained that the victims were not your average internet users who recycle weak passwords with their services. The blog explains that MetaMask lead product manager Taylor Monahan was the first to link the crypto heists to the LastPass breach. Popular security blog KrebsOnSecurity has a very detailed rundown of events that explain how the hackers were seemingly able to crack the LastPass vaults, despite their encryption. They believe hackers stole the unique 12-word seed phrases protecting crypto wallets from LastPass accounts after cracking each vault’s master password.

And LastPass likely wouldn’t acknowledge it either way.īut security researchers who have been investigating recent crypto heists seem to believe that’s the only thing that makes sense. There’s no definitive proof that the LastPass security breach is tied to the cumulative $35 million in crypto heists. The link between LastPass and crypto heists It’s probably also a good idea to ditch LastPass for 1Password or Proton Pass, no matter how long the process takes. If it wasn’t clear back in December, you should change all your passwords stored in LastPass and ensure that your accounts have not been compromised.