The length of the investigation left us with difficult trade-offs to make in that regard, but we understand and regret the frustration that our initial communications caused for both the businesses and consumers who rely on our products. We have heard and taken seriously the feedback that we should have communicated more frequently and comprehensively throughout this process. Given the volume of information we are sharing today, we have structured this update with summaries that include embedded links to provide more detailed information on each topic.

We are privileged to serve millions of users and more than 100,000 businesses, and we want to ensure that all of our customers have the information they need to answer their questions.

What actions should you take to protect yourself or your business?.

What happened and what actions did we take?.

In today’s update, I’ll review those measures and highlight additional security steps that we are taking. Over the same period, we invested a significant amount of time and effort hardening our security while improving overall security operations. We have now completed an exhaustive investigation and have not seen any threat-actor activity since October 26, 2022.ĭuring the course of our investigation, we have learned a great deal more about what happened and are sharing new findings today. I want to share with you an important update about the security incident we disclosed on December 22, 2022.

Business lastpass