LastPass has disclosed another data breach, this time affecting customer contact information and support data. The breach resulted from a compromise at AI business intelligence firm Klue, where attackers stole access tokens for Klue customers, including LastPass, and used them to extract data from Salesforce and other platforms. The stolen information includes names, phone numbers, email addresses, physical addresses, support case data and sales-related information. LastPass emphasised that its own infrastructure was not breached and password vaults remain secure. The company warned customers to remain vigilant against potential phishing attacks leveraging the exposed contact details. This incident adds to LastPass's series of significant data breaches in recent years. The company advised users to exercise caution regarding unsolicited communications requesting sensitive information.

Cybersecurity under siege: data breaches and nation-state attacks on the rise. A recent string of high-profile data breaches has left many wondering about the safety of their personal information. LastPass, a popular password manager, has suffered another significant breach, with attackers gaining access to customer data including names, phone numbers, and email addresses. The breach occurred due to a vulnerability at Klue, an AI business intelligence firm, which allowed hackers to compromise access tokens and steal data from integrated platforms like Salesforce. LastPass has assured customers that their password vaults remain secure, but warned of potential phishing attacks and social engineering attempts. Meanwhile, former national security adviser John Bolton has pleaded guilty to mishandling classified defense information, and Microsoft has disrupted the infrastructure of two major malware operations, Amadey and StealC, in a joint effort with Europol. The operation, dubbed Operation Endgame, seized servers and domains, and recovered millions of stolen access credentials. In Australia, the Security and Intelligence Organisation has announced the establishment of teams to counter nation-state cyberattacks on critical infrastructure, after discovering hackers had compromised a major provider's network. As the World Cup approaches, soccer fans are being warned of scams and phishing attempts. OpenAI has launched an improved version of its GPT-5.5-Cyber model, and introduced a new initiative, Patch the Planet, to support open-source projects on vulnerability patching and security issues. With the AI arms race between China and the US escalating, experts are warning of a potential 'Chernobyl moment' in the world of cybersecurity. As the situation continues to unfold, one thing is clear: cybersecurity is under siege, and it's up to individuals and organizations to remain vigilant and take steps to protect themselves. dArt Studio installs AI for local businesses in Broward & Palm Beach County, FL. dArt Studio reply within 1 business hour.

LastPass customers' data exposed in breach at third-party technology partner. News 24 Jun 2026 Password manager provider LastPass is notifying its customer base of a data breach that resulted in the theft of customer information and support records. The breach did not affect LastPass's own systems but rather occurred at Klue, a technology partner the company uses. Hackers who gained access to Klue's infrastructure extracted an extensive array of personal data belonging to LastPass customers, including names, phone numbers, email addresses and physical addresses. The attackers also obtained customer support case records and sales-related information. LastPass said its infrastructure remained intact and that customer password vaults were not compromised. The scope of the incident extends beyond LastPass. Several other cybersecurity companies, including HackerOne, Recorded Future and Tanium, have also reported data theft stemming from the same breach at Klue. Klue CEO Jason Smith disclosed that the company identified suspicious activity in its systems on June 12. A hacking group operating under the name Icarus claimed responsibility for the breach and has publicly stated that it will release the stolen data if a ransom is not paid. Neither Smith nor LastPass representatives responded to requests for information about the number of affected customers. The data stolen in the incident is believed to contain fragments of sensitive information. Customer support case records typically include details about billing issues and account access problems but can also contain credentials and government-issued identification documents from previous incidents. The breach marks another security incident for LastPass, which disclosed a major breach in 2022. In that incident, hackers stole the complete repository of customer password vaults. Although the vaults were protected by master passwords known only to individual customers, attackers were able to crack weaker passwords offline and access the encrypted contents. The 2022 breach was subsequently linked to several cryptocurrency thefts, with hackers suspected of obtaining digital wallet keys from compromised password vaults. LastPass operates a customer base exceeding 33 million users and approximately 1.6 million paying subscribers as of 2024.