LastPass Data Breach: Hackers Steal Encrypted Password Vaults, Master Passwords at Risk

The company announced that hackers had accessed "certain elements" of customer info, which turned out to be encrypted passwords.

LastPass, a password management company that promises to securely store all of its users' passwords in one place, has announced that hackers were able to steal encrypted password vaults in a data breach that occurred in August.

The company initially claimed that user data had not been accessed, but later revealed in November that an intrusion had taken place and "certain elements" of customer information had been accessed. It has now been revealed that those "certain elements" included the encrypted password vaults. LastPass recommends that users with weak master passwords or less security should consider changing the passwords of any websites stored in their account as an extra precaution. The company claims that there is no evidence that unencrypted credit card data was accessed in the breach.