LastPass hack: online storage vault tells users to change master passwords

http://www.theguardian.com/technology/2015/jun/16/lastpass-hack-online-storage-vault-tells-users-to-change-master-passwords

Version 0 of 1.

A web service that promises to help people keep their various passwords secure has reported hackers may have obtained some user information — although not actual passwords — from its network.

The company was advising users to change their LastPass master passwords, which are used to retrieve encrypted individual passwords for the users’ other online services or accounts. But it said they did not need to change individual passwords for all their accounts.

LastPass, which stores multiple passwords in encrypted form, warned on Monday that it had detected “suspicious activity” on its own computer system. That led to the discovery that some users’ email addresses, password reminders and encryption elements were compromised.

The company said its investigation found no evidence that individual passwords or user accounts were breached.