Another LastPass security breach traces back to a compromised vendor

Credit: Joe Hindy / Android Authority TL;DR LastPass suffered another data incident, but this time the breach originated from third-party vendor Klue rather than LastPass itself. Hackers stole OAuth tokens from Klue, giving them access to connected Salesforce and Gong environments used by LastPass. Exposed information includes customer names, contact details, support case records, physical addresses, and some sales data.