On December 14, 2021, GoTo announced that LastPass would be made into a separate company and accelerate its release timeline. GoTo (formerly LogMeIn Inc.) acquired LastPass in October 2015. It also includes support for bookmarklets. The standard version of LastPass comes with a web interface, but also includes plugins for various web browsers and apps for many smartphones. A plaintiff identified as “John Doe” claims criminals have used the stolen data to break into his LastPass account and steal his private Bitcoin keys, worth $53,000.LastPass is a password manager distributed in subscription form as well as a freemium model with limited functionality. Last week in Boston federal court, LastPass was hit with a lawsuit related to the breach. Whenever they succeed, they’ll have full access to any information inside, including credit card numbers, bank account data, or medical records. And with the information in their possession they can take their time, testing one set of digital locks after another like a burglar rattling doorknobs.

But they can use password-cracking programs to try and guess the master passwords for each vault. Because LastPass stores vault data in encrypted form, those who stole it can’t easily read it, at least not right away.

Worse yet, the intruders were also able to steal the customers’ “vault data” - the encrypted files containing passwords and other sensitive data stored by LastPass’ 33 million subscribers. In a December 22 posting, Toubba said the attackers had also managed to steal an employee’s login credentials, thereby gaining access to “basic customer account information and related metadata including company names, end-user names, billing addresses, email addresses, telephone numbers, and the IP addresses from which customers were accessing the LastPass service.”

Related : Despite LastPass hack, cybersecurity experts say to stick with password managersīut now, LastPass is singing a different tune.

Last pass security