The world's most popular password manager LastPass hacked
LastPass, a password manager used by more than 33 million people worldwide, said hackers recently stole source code and sensitive information after hacking systems.
Most importantly, hackers gained access to the development environment, stole some of the source code and some technical information through one hacked developer account, writes Bloomberg.The company said it found no evidence that users ' passwords, data in storage, or personal information were compromised. DetailsAn investigation into the incident revealed that hackers broke into the development environment — the software that employees use to create and maintain LastPass.
Allan Liska, an analyst at Recorded Future, a cybersecurity firm, said: "it is unlikely that the source code will give attackers access to customer passwords."
LastPass believes that users do not need to do anything to protect their accounts, and recommends simply following the recommendations for setting up and installing a password manager.
The company says the investigation is still ongoing. However, to prevent new problems, they have already "introduced additional security measures" and do not yet see any other evidence of unauthorized activity.
"We use the industry standard of the Zero Knowledge architecture, which ensures that LastPass will never know or gain access to our customers' master password. Our model ensures that only the client has access to decrypt the storage data," LastPass noted.
LastPass creates and stores automatically generated passwords that are difficult to crack. The company's clients include Patagonia, Yelp Inc., State Farm and others.