LastPass Security Breach 2022: What We Know Now
TL;DR
A threat actor ran a sustained data theft campaign that lasted for over 75 days (2.5 months) and resulted in the exposure of an undisclosed number of customer passwords and sensitive data
The attacker leveraged valid credentials stolen from one of four senior DevOps engineers to access a shared cloud-storage environment, initially making it...