LastPass says it discovered the breach after detecting unusual activity within a third-party cloud storage service shared by both LastPass and its affiliate, GoTo. In a nutshell, this means that since your individual passwords are encrypted and locked behind a master password, that even LastPass does not know, no attacker could gain access to them. But LastPass has reassured customers that their passwords were not accessed, remaining safely encrypted due to LastPass’s Zero Knowledge architecture. It is unclear what customer information was compromised. Now, the company has said that information taken in the August incident was used to gain access to 'certain elements of our customers’ information'. In August, LastPass said an unauthorized party had gained access to portions of the LastPass development environment through a single compromised developer account.

Password manager LastPass has notified customers of a security incident following an already-known about breach earlier this year.

Lastpass small business