LastPass suffers data breach in Klue supply chain attack
LastPass suffered a data breach linked to the Klue supply chain attack. LastPass confirmed the breach and notified users.
Key facts
- Affected organisation
- LastPass
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Klue supply chain attack
- Location
- United States
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- LastPass confirmed a data breach resulting from the Klue supply chain attack and notified users.
4 related reports
Other incidents at LastPass
LastPass's history of hacks and repeated breaches
LastPass's history of hacking incidents was examined. The specific timing of the incidents, the extent of the damage and the response have not been confirmed.
Related reports: 2 · last report →LastPass 2022 breach affected 1.6 million UK users
1.6mImpact: Data of 1.6 million UK users leaked
In 2022, LastPass suffered a data breach in which password vaults were stolen, affecting 1.6 million users in the UK. Investigators said cryptocurrency thefts believed to be linked to the breach cost more than 25 people around $4.4 million on a single day, 25 October 2023. UK authorities fined LastPass £1.2 million in December 2025.
Related reports: 6 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.