{"id":159196,"date":"2023-02-28T09:23:08","date_gmt":"2023-02-28T15:23:08","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2023\/02\/lastpass-says-employees-home-computer-was-hacked-and-corporate-vault-taken"},"modified":"2023-02-28T09:23:08","modified_gmt":"2023-02-28T15:23:08","slug":"lastpass-says-employees-home-computer-was-hacked-and-corporate-vault-taken","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2023\/02\/lastpass-says-employees-home-computer-was-hacked-and-corporate-vault-taken","title":{"rendered":"LastPass says employee\u2019s home computer was hacked and corporate vault taken"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/lastpass-says-employees-home-computer-was-hacked-and-corporate-vault-taken2.jpg\"><\/a><\/p>\n<p>Already smarting from a breach that put partially encrypted login data into a threat actor\u2019s hands, LastPass on Monday said that the same attacker hacked an employee\u2019s home computer and obtained a decrypted vault available to only a handful of company developers.<\/p>\n<p>Although an initial intrusion into LastPass ended on August 12, officials with the leading password manager <a href=\"https:\/\/support.lastpass.com\/help\/incident-2-additional-details-of-the-attack\">said<\/a> the threat actor \u201cwas actively engaged in a new series of reconnaissance, enumeration, and exfiltration activity\u201d from August 12 to August 26. In the process, the unknown threat actor was able to steal valid credentials from a senior DevOps engineer and access the contents of a LastPass data vault. Among other things, the vault gave access to a shared cloud-storage environment that contained the encryption keys for customer vault backups stored in <a href=\"https:\/\/aws.amazon.com\/s3\/\">Amazon S3 buckets<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Already smarting from a breach that put partially encrypted login data into a threat actor\u2019s hands, LastPass on Monday said that the same attacker hacked an employee\u2019s home computer and obtained a decrypted vault available to only a handful of company developers. Although an initial intrusion into LastPass ended on August 12, officials with the [\u2026]<\/p>\n","protected":false},"author":396,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,1625],"tags":[],"class_list":["post-159196","post","type-post","status-publish","format-standard","hentry","category-cybercrime-malcode","category-encryption"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/159196","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/396"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=159196"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/159196\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=159196"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=159196"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=159196"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}