Home / Technology / LastPass Breach Linked to Multi-Million Crypto Heists
LastPass Breach Linked to Multi-Million Crypto Heists
24 Jun
Summary
- Stolen LastPass vaults may have been cracked.
- Over $35 million in cryptocurrency stolen since late 2022.
- Victims previously used LastPass to store crypto seed phrases.
Security experts suggest that LastPass password vaults compromised in late 2022 breaches have since been cracked, facilitating substantial cryptocurrency theft. Over $35 million in digital assets has reportedly been stolen through a series of high-value heists occurring regularly since December 2022.
Investigations indicate that a common thread among the over 150 identified victims was their use of LastPass to store their cryptocurrency seed phrases. These crucial recovery keys, essential for accessing digital wallets, were seemingly exposed.
Researchers observed that stolen funds were moved to identical blockchain addresses, further solidifying the link between the victims. LastPass itself experienced two breaches in August and November of 2022.
LastPass CEO Karim Toubba stated that the November incident is under active investigation by law enforcement and is involved in pending litigation. The company has not confirmed a direct link between its 2022 breaches and the reported crypto thefts.
