LastPass said in a June 2026 notice that it was affected by a security breach tied to Klue. According to the company, the incident exposed OAuth tokens, gave attackers access to LastPass data stored in Salesforce, and may also have exposed customer contact records and support data. LastPass also says password vaults and master passwords were not affected.
In LastPass’s account of what happened, the attackers breached Klue first, then used stolen customer tokens to get into Salesforce, along with systems connected to Salesforce and Gong. The company says it has since revoked that access, blocked employees from using Klue, and started an investigation.
LastPass says your password vault and master password weren’t affected. Still, customer contact records may have been exposed. So if you get an unexpected message that appears to be from LastPass, be extra careful, especially if it asks for credentials, payment, or urgent action on your account.
If you use LastPass regularly, take this seriously. Attackers don’t need access to your vault to do damage; stolen CRM data can be enough to fuel convincing phishing emails and fake support scams. And this comes after LastPass’s much more serious 2022 breach, later reports in 2023 and 2024 about offline cracking, reports of crypto theft tied to seed phrases, a £1.23 million fine from the UK Information Commissioner’s Office in 2025, a $24.5 million class-action settlement, and reports linking this Klue attack to Icarus and other affected companies, including Recorded Future, Tanium, Jamf, Sprout Social, Gong, and Insurity.
You can read LastPass’s June 2026 notice on LastPass’s official site.
Author: Gerard Patrick Cadiang
{
"social": {
"email": "content.reviewer67@ext.softonic.com",
"facebook": "",
"twitter": "",
"linkedin": "https:\/\/www.linkedin.com\/in\/gerard-cadiang-88090728b\/"
},
"ja-JP": "",
"de-DE": "Gerard Cadiang ist Schriftsteller, 3D-Künstler und Spieleentwickler, der Softwarebesprechungen und Videospiele mit technischer Präzision und kreativem Scharfsinn behandelt.",
"en-US": "Gerard Cadiang is a writer, 3D artist, and game developer who covers software reviews and video games. He wields the skills of a writer in constant flux between technical precision and creative whimsy.",
"es-ES": "Gerard Cadiang es escritor, artista 3D y desarrollador de videojuegos que aborda reseñas de software y videojuegos con precisión técnica e ingenio creativo.",
"fr-FR": "Gerard Cadiang est un écrivain, artiste 3D et développeur de jeux vidéo qui traite les critiques de logiciels et les jeux vidéo avec une précision technique et une fantaisie créative.",
"it-IT": "Gerard Cadiang è uno scrittore, artista 3D e sviluppatore di videogiochi che affronta recensioni software e videogiochi con precisione tecnica e estro creativo.",
"nl-NL": "Gerard Cadiang is een schrijver, 3D-kunstenaar en game developer die softwarereviews en videogames behandelt met technische precisie en creatieve vindingrijkheid.",
"pl-PL": "Gerard Cadiang to pisarz, artysta 3D i twórca gier, który zajmuje się recenzjami oprogramowania i grami wideo z precyzją techniczną i kreatywnym kunsztem.",
"pt-BR": "Gerard Cadiang é escritor, artista 3D e desenvolvedor de jogos que aborda análises de software e videogames com precisão técnica e criatividade inovadora."
}
View all posts by Gerard Patrick Cadiang
