NewsBytes
    Hindi Tamil Telugu
    More
    In the news
    Narendra Modi
    Amit Shah
    Box Office Collection
    Bharatiya Janata Party (BJP)
    OTT releases
    Hindi Tamil Telugu
    NewsBytes
    User Placeholder

    Hi,

    Logout

    India
    Business
    World
    Politics
    Sports
    Technology
    Entertainment
    Auto
    Lifestyle
    Inspirational
    Career
    Bengaluru
    Delhi
    Mumbai

    Download Android App

    Follow us on
    • Facebook
    • Twitter
    • Linkedin
    Home / News / Technology News / LastPass data breaches behind crypto heists worth Rs. 300cr: Experts
    Next Article
    LastPass data breaches behind crypto heists worth Rs. 300cr: Experts
    LastPass experienced two significant data breaches in August and November last year (Photo credit: LastPass)

    LastPass data breaches behind crypto heists worth Rs. 300cr: Experts

    By Rishabh Raj
    Sep 07, 2023
    05:52 pm

    What's the story

    Security experts are sounding the alarm as they uncover a concerning connection between a series of cryptocurrency heists and the 2022 LastPass data breaches.

    In a shocking revelation, it has been reported that over 150 victims of crypto theft have had their LastPass password vaults compromised, resulting in the theft of over $35 million (nearly Rs. 290 crores) in cryptocurrencies.

    Details

    The link between LastPass and cryptocurrency heists

    Researchers, including Taylor Monahan from MetaMask, have identified a common thread among the victims of cryptocurrency theft: they had previously used LastPass to store their "seed phrases."

    A seed phrase is a crucial cryptographic key required to access cryptocurrency investments, often stored securely on encrypted services like password managers.

    The stolen funds were traced to the same blockchain addresses, further cementing the connection between the victims and the LastPass security breaches.

    What Next?

    LastPass's troubled history

    LastPass, a popular password guidance service, faced two well-documented data breaches in August and November of 2022.

    During the second breach, hackers gained access to shared cloud storage containing customer encryption keys for vault backups.

    The question remains whether any of the stolen password vaults have been successfully cracked open, granting cybercriminals access to sensitive information.

    Insights

    LastPass's response and ongoing investigations

    In a statement to The Verge, LastPass CEO Karim Toubba has confirmed that the November 2022 data breach is the subject of an ongoing investigation by law enforcement and is also tied to pending litigation.

    However, the company has not addressed the potential connection between the two breaches and the reported cryptocurrency thefts. Users and security experts await further clarification on this matter.

    Insights

    Security experts' urgent recommendations

    Nick Bax, head of analytics at crypto wallet improvement firm Unciphered, has echoed the concerns raised by Monahan in an interview with KrebsOnSecurity.

    He urged LastPass users to take immediate action. He advises changing all passwords and migrating any exposed cryptocurrency holdings to safer platforms.

    This precautionary measure is seen as vital, despite the inconvenience it may cause.

    Facebook
    Whatsapp
    Twitter
    Linkedin
    Related News
    Latest
    Cybersecurity
    Cybercrimes
    Cryptocurrency

    Latest

    Heavy rain expected in 10+ states; check details  Delhi
    Mohanlal announces biography 'Mukharagam' on his 65th birthday  Malavika Mohanan
    Why Telegram's billionaire founder is banned from leaving France Telegram
    Trump announces $175B 'Golden Dome' missile defense shield Canada

    Cybersecurity

    Beware of calls from unknown numbers starting with +92 Pakistan News
    India Inc. hit most by malware attacks after US, Japan United States of America
    Sensitive data of 100 million users leaked on Dark Web Data Leak
    WhatsApp group invite links, user profiles accessible via Google search WhatsApp

    Cybercrimes

    Anti-government social media posts will be considered 'cybercrime': Bihar Government Bihar
    Arvind Kejriwal's daughter duped of Rs. 34,000 on OLX Arvind Kejriwal
    Government asks people to register as cybercrime volunteers Ministry Of Home Affairs
    While Delhi was under lockdown, cybercriminals had a field day Delhi Police

    Cryptocurrency

    Cryptocurrency prices today: Check rates of Bitcoin, Ethereum, Dogecoin, Solana Bitcoin
    Today's cryptocurrency prices: Check rates of Bitcoin, Ethereum, Tether, Solana Bitcoin
    Today's cryptocurrency prices: Check Bitcoin, Ethereum, Dogecoin, Tether rates Bitcoin
    Today's cryptocurrency prices: Check Bitcoin, Ethereum, Dogecoin, Tether rates Bitcoin
    Indian Premier League (IPL) Celebrity Hollywood Bollywood UEFA Champions League Tennis Football Smartphones Cryptocurrency Upcoming Movies Premier League Cricket News Latest automobiles Latest Cars Upcoming Cars Latest Bikes Upcoming Tablets
    About Us Privacy Policy Terms & Conditions Contact Us Ethical Conduct Grievance Redressal News News Archive Topics Archive Download DevBytes Find Cricket Statistics
    Follow us on
    Facebook Twitter Linkedin
    All rights reserved © NewsBytes 2025