LastPass' 2022 Breach Leads to Millions Stolen in Crypto Heists

In late 2022, LastPass, a popular password manager, faced a significant security breach. While LastPass initially reported stolen encrypted passwords, the full extent wasn't revealed until later. Hackers didn't just target LastPass users; they also accessed encrypted backups from associated GoTo products, endangering GoTo customers as well. A recent investigation by blockchain detective ZachXBT revealed that the stolen data has been used in several crypto heists. Over 40 victims have lost a combined $5. 36 million in cryptocurrency. The stolen funds were swiftly converted into ETH and moved through various instant exchanges, making them harder to track.

Last year, ZachXBT identified two earlier crypto heists linked to this breach. One in October 2023 resulted in a $4. 4 million loss, and another in February saw losses over $6. 2 million. The latest heist highlights that the effects of the 2022 LastPass breach are lingering. Experts advise LastPass users to immediately migrate their crypto assets, change passwords, and update seed phrases to protect their assets.

Actions