BreachPublished 23 Jun 2026

LastPass confirms data breach in Klue supply chain attack

Source Bleeping Computer

Description

LastPass announced that hackers accessed customer data from its Salesforce environment after stealing the company's OAuth tokens in the Klue supply chain attack earlier this month. [...]

Impact

The breach exposed personally identifiable information (PII) and CRM data of LastPass customers accessible via Salesforce, including names, phone numbers, email addresses, physical addresses, and support case information. This data exposure increases the risk of phishing and social engineering attacks targeting affected customers. However, LastPass's core password management services and customer vaults remained secure and unaffected. No evidence was found that Gong-related data was accessed. The incident also highlights risks associated with third-party integrations and supply chain attacks.

Defensive guidance

LastPass has disabled employee access to Klue and rotated all exposed API/OAuth tokens to prevent further unauthorized access. Customers are advised to remain vigilant against phishing and social engineering attempts, especially unsolicited communications requesting sensitive information. LastPass recommends not sharing master passwords and only trusting official support channels. Since this is a supply chain incident involving third-party OAuth tokens, remediation focuses on token rotation and access revocation. Monitor vendor advisories for updates. Patch status is not applicable as this is an incident involving compromised tokens rather than a software vulnerability.

References

bleepingcomputer.com/news/security/lastpass-confirms-data-breach-in-klue-supply-chain-attack/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 23 Jun 2026, 14:09 UTC

References

Community reviews

Related threats