{"id":370855,"date":"2026-06-24T06:04:00","date_gmt":"2026-06-24T13:04:00","guid":{"rendered":"https:\/\/cms-articles.softonic.io\/en\/?p=370855"},"modified":"2026-06-24T06:04:20","modified_gmt":"2026-06-24T13:04:20","slug":"lastpass-confirms-2026-customer-data-breach-klue-hack-exposed-salesforce-data","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/lastpass-confirms-2026-customer-data-breach-klue-hack-exposed-salesforce-data\/","title":{"rendered":"LastPass confirms 2026 customer data breach: Klue hack exposed Salesforce data"},"content":{"rendered":"

LastPass<\/a> said in a June 2026<\/strong> notice that it was affected by a security breach tied to Klue<\/a>. According to the company, the incident exposed OAuth tokens, gave attackers access to LastPass data stored in Salesforce, and may also have exposed customer contact records and support data. LastPass also says password vaults and master passwords were not affected.<\/p>\n

\r\n
\r\n
\r\n
\r\n \"Bitwarden\"\r\n <\/div>\r\n
\r\n Bitwarden<\/span>\r\n Download<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path><\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n\n\n\n

In LastPass\u2019s account of what happened, the attackers breached Klue first, then used stolen customer tokens to get into Salesforce, along with systems connected to Salesforce and Gong<\/a>. The company says it has since revoked that access<\/strong>, blocked employees from using Klue, and started an investigation.<\/p>\n\n

LastPass says your password vault and master password weren\u2019t affected. Still, customer contact records<\/strong> may have been exposed. So if you get an unexpected message that appears to be from LastPass, be extra careful, especially if it asks for credentials, payment, or urgent action on your account.<\/p>\n\n

If you use LastPass regularly, take this seriously. Attackers don\u2019t need access to your vault to do damage; stolen CRM data can be enough to fuel convincing phishing emails and fake support scams. And this comes after LastPass\u2019s much more serious 2022<\/strong> breach, later reports in 2023 and 2024 about offline cracking, reports of crypto theft tied to seed phrases, a \u00a31.23 million fine from the UK Information Commissioner\u2019s Office in 2025, a $24.5 million class-action settlement, and reports linking this Klue attack to Icarus and other affected companies, including Recorded Future, Tanium, Jamf, Sprout Social<\/a>, Gong, and Insurity.<\/p>\n\n

You can read LastPass\u2019s June 2026<\/strong> notice on LastPass\u2019s official site.<\/p>","protected":false},"excerpt":{"rendered":"

LastPass said in a June 2026 notice that it was affected by a security breach tied to Klue. According to the company, the incident exposed OAuth tokens, gave attackers access to LastPass data stored in Salesforce, and may also have exposed customer contact records and support data. LastPass also says password vaults and master passwords … Continue reading “LastPass confirms 2026 customer data breach: Klue hack exposed Salesforce data”<\/span><\/a><\/p>\n","protected":false},"author":9325,"featured_media":370854,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[],"usertag":[],"vertical":[],"content-category":[],"class_list":["post-370855","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/370855","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/9325"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=370855"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/370855\/revisions"}],"predecessor-version":[{"id":370856,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/370855\/revisions\/370856"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/370854"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=370855"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=370855"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=370855"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=370855"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=370855"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=370855"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}