LastPass Source Code Targeted by Hackers

LastPass, the most popular password manager in the world, has been hacked. The company's source code and even some of its most valuable proprietary data were stolen by hackers. More specifically, the hacker illegally accessed the password manager's proprietary tech details along with its source code. The hack occurred in mid-August.

How Was the Hack Conducted?

The individual responsible for the attack breached a developer account to pluck segments of LastPass's environment for development. It is possible that the hacker obtained access to LastPass customer information. 

What Other Information was Accessed in the Attack?

Assuming the hacker bypassed the tempting password storage spaces would be irresponsible. Though such vaults are encrypted with passwords to prevent unauthorized parties from obtaining access, hackers can still view and steal those strings of letters, numbers, and special characters. 

LastPass made it perfectly clear that its "zero-knowledge" approach to data storage and access guarantees customers can obtain access to password vault data that has been decrypted. Furthermore, it is also worth noting that the company's services and products were not compromised in the hack.

What is LastPass’s Response to the Incident?

LastPass insists it mitigated the fallout from the hack. The company incorporated digital security measures to bolster its electronic fortifications further. LastPass customers will also be happy to learn that the company enlisted the assistance of a forensics and security firm to analyze the infiltration and implement the safeguards necessary to prevent subsequent attacks. 

The company's quick response to the hack is understandable as it is not the first time it has suffered a significant breach. LastPass was victimized in a separate online strike over half a decade ago. The hack from 2015 culminated in the theft of master passwords and usernames. 

What is the Importance of Strong Master Passwords in the Context of the Hack?

Strong master passwords are essential in preventing the creation of an entryway to access the storage space for password storage. In comparison, weaker passwords spur the generation of such a pathway, ultimately providing access to the password vault and all of the information those passwords unlock. 

Where Does LastPass go From Here?

Let's shift our attention to how LastPass bounces back from the breach. The company is in a problematic situation as its source code has been compromised, creating opportunities for manipulation as well as additional criminal activity.

Though LastPass addressed the compromised developer account in the breach, additional damage may be inflicted. If the company addresses the "phantom" login problem that its customers have complained of in the past, updates its digital safeguards, and rectifies its source code, it will likely retain the bulk of its customer base.

How Can Similar Hacks be Prevented in the Future?

Aside from bolstering password strength to obtain access to a password vault, it is also possible to prevent cyber attacks by strengthening antivirus protections, implementing firewalls, and implementing additional cybersecurity measures. 

When in doubt, lean on the cybersecurity masters for guidance, and you'll compute, surf the web, and use your computer for work/play purposes in total confidence.