LastPass breach #3 leaked no vaults: it spilled through a CRM vendor, Klue (9to5mac.com)
LastPass's third breach notice didn't come from its own servers. A vendor called Klue — a CRM-attached "market intelligence" platform for sales teams — got compromised, exposing LastPass customer names, phone numbers, emails, and physical addresses. Encrypted vaults were untouched.
On HN the pile-on was instant. But the sharpest comment cut the other way: a security engineer noted every sales org has a dozen of these tools wired in, and the only surprise is that this kind of breach doesn't happen far more often.
Sign in to save