LastPass: One Password, 33 Million Vaults
Unable to add items
Add to basket failed.
Add to wishlist failed.
Failed to remove from Wish List.
Adding to library failed
Unable to follow podcast
Unable to unfollow podcast
-
Narrated by:
-
By:
In August 2022, an attacker compromised a software engineer's laptop and stole internal documentation from LastPass, the password manager. That documentation pointed to a senior DevOps engineer whose home computer, running an outdated copy of Plex Media Server, let the attacker plant a keylogger and capture the engineer's master password. Because LastPass allowed personal and corporate vaults to share one password, that single capture opened the keys to the encrypted vault backups of more than thirty-three million customers. LastPass has since agreed to settle US claims for about twenty-four and a half million dollars, a settlement pending final approval and not an admission of liability, and the UK's Information Commissioner's Office fined the company over 1.2 million pounds.