In a statement, the company said that the threat actor 'was also able to copy a backup of customer vault data from the encrypted storage container which is stored in a proprietary binary format that contains both unencrypted data, such as website URLs, as well as fully-encrypted sensitive fields such as website usernames and passwords, secure notes, and form-filled data'. LastPass is a freemium password manager that stores encrypted passwords online. It's one of the latest incidents of hacking attempt on customer passwords.Įncrypted password manager LastPass last month admitted that hackers were able to 'copy a backup of customer vault data', in a recent data breach. Gen Digital sent data breach notices to nearly 6,450 customers whose accounts were compromised. 'In accessing your account with your username and password, the unauthorised third party may have viewed your first name, last name, phone number, and mailing address,' read the data breach notice. Hackers compromised accounts as far back as December 1, according to the company.

Credential stuffing is a cyberattack method in which attackers use lists of compromised user credentials to breach into a system.

Norton and life lock