UK fines LastPass £1.2 million for data breach affecting 1.6 million people

UK fines LastPass £1.2 million for data breach affecting 1.6 million people

LastPass, a password management company, was fined £1.2 million by the UK ICO after a 2022 data breach that exposed personal information of up to 1.6 million users. The incident involved hacker access through stolen credentials, highlighting weaknesses in LastPass’s security measures. #LastPass #ICO #DataBreach #CredentialTheft

Keypoints

  • LastPass was fined for inadequate security measures following a significant data breach in 2022.
  • The breach involved two hacking incidents, one targeting employee source code and the other a senior engineer’s device.
  • <li; Attackers obtained encrypted data and credentials, but cracking passwords is considered highly difficult due to strong encryption.

  • The ICO emphasized there was no evidence of password decryption, but fears of cracking still exist.
  • LastPass’s security lapse exposed personal data of millions and resulted in ongoing security concerns and fallout.

Read More: https://therecord.media/uk-fines-lastpass-over-1-million-data-breach