Hackers Breach LastPass Developer System to Steal Source Code

Password management service LastPass confirmed a security
incident that resulted in the theft of certain source code and
technical information.

The security breach is said to have occurred two weeks ago,
targeting its development environment. No customer data or
encrypted passwords were accessed.

“An unauthorized party gained access to portions of the LastPass
development environment through a single compromised developer
account and took portions of source code and some proprietary
LastPass technical information,” LastPass CEO Karim Toubba said^[1].

Amidst ongoing investigation into the incident, the company said
it has engaged the services of a leading cybersecurity and
forensics firm and that it has implemented additional
countermeasures.

LastPass, however, didn’t elaborate on the exact mitigation
techniques that it used to strengthen its environment. It also
reiterated that the break-in had no impact on users’ master
passwords, adding there is no evidence of further malicious
activity.

As of now, no action is required from the side of users.
LastPass claims^[2]
over 33 million active users and more than 100,000 business
accounts.