LastPass notifies users of yet another data breach

Post by PunchyHamster » Thu, Jun 25, 2026, 2:37 PM UTC

eddieroger wrote: post #77

jordanb wrote: post #50

Earlier quoted context omitted.

Funny I used to work in an org with Okta. Having your own auth workflow was instant fail with the well architected framework committee. Using Okta was instant pass. I don't necessarily disagree with that policy but given that Okta was breached several times while I was working there, it was interesting the extent to which our CSO had blinders about it.

Liability is the answer! If you build an auth system and it fails, it's your backside. If Okta fails, it's theirs. Enterprises buy products as much as they buy protection from problems.

Post by SV_BubbleTime » Thu, Jun 25, 2026, 2:43 PM UTC

john_strinlai wrote: post #51

any company that stuck around (or began using) lastpass after vaults were leaked probably does not care about this one at all, considering its just CRM data. i can sympathize a little bit with companies that stick with lastpass. when i had to switch an org from lastpass to 1password, it was a massive undertaking and incredibly annoying. however, i have no sympathy for anyone who has chosen lastpass after 2022.

Post by 1a527dd5 » Thu, Jun 25, 2026, 2:46 PM UTC

Post by vova_hn2 » Thu, Jun 25, 2026, 2:48 PM UTC

shizcakes wrote: post #63

doubled112 wrote: post #56

Earlier quoted context omitted.

Syncing isn't a KeePassXC problem. The database is just a file. That may or may not make your life easier. There are a few decent Android and iOS apps that work well. I use Nextcloud and WebDAV for access. Not a setup I can recommend to just anybody though.

One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you. The need to have an opinion on how you’d like to sync a file does, as you suggest, eliminate some portion of the population who need a fully baked answer in one step. I used to use Google Drive, but now I use Syncthing, further reducing my exposure. Paired with Synctrain and KeePassium on iOS. One t…

Post by antiframe » Thu, Jun 25, 2026, 2:56 PM UTC

philote wrote: post #83

antiframe wrote: post #80

Earlier quoted context omitted.

> I'm pretty sure 99% of the people on exposed have already had their names, phone numbers, email and physical addresses leaked already. This has nothing to do with the security of your passwords stored in LP. They have some CRM, some person from their 800 employees clicked a sketchy link and it leaked that. It's not good, but its hardly an indictment of their product or usefulness Would you be okay will a public dat…

Yes, a public database like this would be acceptable. That way the info isn't paywalled behind some white pages site or similar. And then maybe I could even update my own info to be correct. Contact info is pretty much out there for most people already. Hell, I put it on my resume and send that out to many people and put it on public sites.