Home / Technology / Password Manager Hacked: 2FA Weakness Exposed
Password Manager Hacked: 2FA Weakness Exposed
3 Jun
Summary
- Around 20 users' password vaults were exposed due to a brute force attack.
- Attackers targeted two-factor authentication, not internal systems.
- Security controls locked targeted accounts, and affected users were notified.
Password manager Dashlane has disclosed that a recent brute force attack resulted in the exposure of around 20 users' password vaults. The unauthorized access was achieved by targeting the company's two-factor authentication (2FA) system through automated software, rather than by breaching Dashlane's internal security infrastructure.
The attackers employed trial-and-error methods to overcome the 2FA protections, aiming to register new devices on existing accounts. Fortunately, Dashlane's security measures automatically locked the targeted accounts due to the high volume of login attempts. All affected users have been individually notified of the incident.
While the vault data itself remains protected by encryption unless a Master Password is compromised, Dashlane has implemented measures to prevent future occurrences and blocked the threat actors' traffic. The company advises users to review associated devices, ensure 2FA is enabled, and utilize a strong Master Password.
