Technology NewsLastPass Parent Company GoTo Suffers Data Breach, Customers' Backups...

LastPass Parent Company GoTo Suffers Data Breach, Customers’ Backups Compromised

-


Jan 25, 2023Ravie LakshmananData Breach / Remote Work Tool

LastPass Parent Company GoTo Suffers Data Breach, Customers’ Backups Compromised

LastPass-owner GoTo (formerly LogMeIn) on Tuesday disclosed that unidentified threat actors were able to steal encrypted backups of some customers’ data along with an encryption key for some of those backups in a November 2022 incident.

The breach, which targeted a third-party cloud storage service, impacted Central, Pro, join.me, Hamachi, and RemotelyAnywhere products, the company said.

“The affected information, which varies by product, may include account usernames, salted and hashed passwords, a portion of multi-factor Authentication (MFA) settings, as well as some product settings and licensing information,” GoTo’s Paddy Srinivasan said.

Additionally, MFA settings pertaining to a subset of its Rescue and GoToMyPC customers were impacted, although there is no evidence that the encrypted databases associated with the two services were exfiltrated.

The company did not disclose how many users were impacted, but said it’s directly contacting the victims to provide additional information and recommend certain “actionable steps” to secure their accounts.

GoTo has also taken the step of resetting the passwords of affected users and requiring them to reauthorize MFA settings. It further said it’s migrating their accounts to an enhanced identity management platform that claims to offer more robust security.

The enterprise software provider emphasized that it does store full credit card details and that it does not collect personal information such as dates of birth, addresses, and Social Security numbers.

The announcement comes nearly two months after both GoTo and LastPass disclosed “unusual activity within a third-party cloud storage service” that’s shared by the two platforms.

LastPass, in December 2022, also revealed that the digital burglary leveraged information stolen from an earlier breach that took place in August and enabled the adversary to steal a massive stash of customer data, including a backup of their encrypted password vaults.

The obtained information was “used to target another employee, obtaining credentials and keys which were used to access and decrypt some storage volumes within the cloud-based storage service,” it noted.

Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.



LEAVE A REPLY

Please enter your comment!
Please enter your name here

Latest news

Is it a tablet or a laptop? This is the new Xiaomi Book that the firm is preparing

Xiaomi will present a renewal of its convertible and economic concept with Windows 11 very soon in China....

காலநிலை மாற்றம் ஒரு பெருங்கடலை “பேரழிவை” ஏற்படுத்தலாம்

மோசமான வெப்பமயமாதலின் கீழ், தெற்கு மெரிடியனல் ஓவர்டர்னிங் சர்குலேஷன் 2300 இல் முற்றிலும் நிறுத்தப்படலாம் என்று உருவகப்படுத்துதல்கள் தெரிவிக்கின்றன.வலுவான வெப்பமயமாதல் ஆழமான கவிழ்ப்பு சுழற்சியை...

The Last of Us 3 may already be in development against previous forecasts. Plans are to include even PlayStation 6

The series created by Naughty Dog has been success after success, recently going far beyond its native medium....

Encrypted Messaging App Exclu Used by Criminal Groups Cracked by Joint Law Enforcement

Feb 07, 2023Ravie LakshmananEncryption / Privacy A joint law enforcement operation conducted by Germany, the Netherlands, and Poland has...

The Last of Us 3 may already be in development against previous forecasts. Plans are to include even PlayStation 6

The series created by Naughty Dog has been success after success, recently going far beyond its native medium....

Encrypted Messaging App Exclu Used by Criminal Groups Cracked by Joint Law Enforcement

Feb 07, 2023Ravie LakshmananEncryption / Privacy A joint law enforcement operation conducted by Germany, the Netherlands, and Poland has...

Must read

Siddharth Kiaras grand wedding Photos released

Siddharth Malhotra and Kiara Advani's grand wedding photos...