New by me at Forbes (so much for taking time off): LastPass customer password vaults stolen by threat actor, the password manager's CEO confirms. While credentials and other sensitive data is encrypted, the decryption key is derived from the master password, If this is weak then those users could be in trouble - I recommend changing the master password anyway, doing so re-encrypts the vault. If you fall into the weak master password user category, I recommend changing all your website login credentials as well.
+
= $0