In this data breach, cyber criminals were able to access data such as phone numbers, email addresses, Twitter IDs, and other public information. In December 2022, a data leak described as containing email addresses for over 200 million Twitter users was published on a popular hacker forum.

Change account passwords if you believe your master password has been exposedĪdditional information about this breach is available in this LastPass blog.

Never reuse passwords across multiple accounts.

Change your master password (minimum of 16 characters).

To ensure the security of your account, the Office of Information Technologies (OIT) Information Security team recommends all LastPass customers follow these steps:

Additional information about these tactics is available in this Imperva website article. Form-filled data (first/last name, address, phone number, etc.)Ĭyber criminals commonly use this information to attack those involved in a breach through password guessing, credential stuffing (e.g., attacks associated with password reuse across multiple accounts), and various types of social engineering tactics (e.g., phishing scams).LastPass confirmed cyber criminals stole a copy of a backup of customer vault data that contained: In December 2022, cyber criminals were able to access a third-party cloud storage service that LastPass uses to store archived backups of their production data. Anyone with a LastPass or Twitter account may want to follow the tips included below to ensure their accounts remain secure. Recently, both LastPass and Twitter were involved in data breaches that resulted in data exposure.

Lastpass breach