LastPass user data stolen by hackers again

Password manager LastPass says a supply chain attack involving third-party vendor Klue exposed customer contact and support information, though customer vaults and stored credentials were not affected. Exposed customer data could fuel phishing attacks An unauthorized actor accessed LastPass's Salesforce environment using OAuth tokens stolen from third-party vendor Klue. The breach exposed sensitive customer details including names, phone numbers, and support records.