securityonline.info 6/24/2026, 2:01:12 AM · external

LastPass reports data breach after Klue hack exposes CRM data

LastPass reports data breach after Klue hack exposes CRM data
Developing story incident 4 articles tracked
Klue supply chain breach exposes customer CRM and Salesforce data
CyberSIXT Evidence Panel
Primary Source blog.lastpass.com
Threat Actor
Icarus

THE content discusses a critical alert about recent exploits, specifically detailing a security breach involving LastPass. Key points include:

1. **Data Breach Confirmation**: LastPass confirmed customer data theft resulting from a supply chain attack via vendor Klue, where stolen OAuth tokens were used to access Salesforce data.

2. **Data Exposed**: The breach exposed CRM contact information, including names, emails, phone numbers, and addresses, although the number of affected records was not disclosed.

3. **Attack Mechanism**: The attackers, linked to the group Icarus, exploited weaknesses in Klue’s system to harvest tokens allowing unauthorized access.

4. **Affected Parties**: Multiple Klue customers, including Recorded Future and Tanium, were impacted, but LastPass did not specify the extent of their customer base's exposure.

5. **Preventive Measures**: Users are advised to be vigilant about phishing attempts and that LastPass has taken steps to secure its systems by restricting access and informing law enforcement.

6. **Company Response**: Remediation efforts included notifying affected parties and conducting a joint investigation with Klue and Salesforce.

View Primary Source Via securityonline.info

Article by CyberSIXT

Timeline Coverage

Swipe to explore timeline