According to estimates from September, since 2022, at least $35 million in cryptocurrency has been taken from LastPass breach victims; the most recent theft has increased this amount.
According to reports, a 2022 data breach that affected the password storage programme LastPass caused at least 25 individuals to witness $4.4 million in cryptocurrency being taken out of 80 wallets.
Pseudonymous on-chain researcher ZachXBT claimed in an Oct. 27 X (Twitter) post that they and MetaMask developer Taylor Monahan monitored the fund transfers of at least 80 wallets that were hacked on Oct. 25.
Cryptocurrency Heist: Thief Pilfers $4.4M in LastPass Breach Fallout,Cryptocurrency Heist: Thief Pilfers $4.4M in LastPass Breach Fallout
In a report that accompanied the Chainabuse, Monahan stated that “the majority, if not all, of the victims are longtime LastPass users and/or confirm having stored their [crypto wallet] keys/seeds in LastPass.”
LastPass said in December 2022 that an attacker had used data taken from an August breach to target a LastPass employee, obtaining their login credentials and decrypting stored client data.
A backup of encrypted client vault data was also taken, and LastPass issued a warning that this material might be decrypted if the attacker used brute force to guess the master password for the account.
Cybersecurity writer Brian Krebs revealed in a September blog post that over $150 victims had over $35 million worth of cryptocurrency taken from some of the LastPass user vaults that appeared to have been breached.
A class-action lawsuit was filed against LastPass in January by those who said that the August 2022 hack caused about $53,000 worth of Bitcoin to be stolen.
ZachXBT said in his most recent X post that anyone who has ever had a private key or wallet seed in LastPass should “migrate your crypto assets immediately.”
Cryptocurrency Heist: Thief Pilfers $4.4M in LastPass Breach Fallout,Cryptocurrency Heist: Thief Pilfers $4.4M in LastPass Breach Fallout,Cryptocurrency Heist: Thief Pilfers $4.4M in LastPass Breach Fallout, Cryptocurrency news, Cryptocurrency News