LastPass hacking alerts turn out to be false alarms

lastpass-s21u-lifestyle.jpg

The warning messages were sent in error.

What you need to know

  • LastPass has denied reports that there were unauthorized login attempts to some accounts.
  • The recent security alerts received by some users were apparently triggered in error.
  • Some LastPass users received emails this week warning them about failed login attempts.

LastPass users can welcome the incoming year with peace of mind after all. A LastPass executive confirmed that no accounts had been compromised following multiple reports from users claiming they’d been notified of failed unauthorized logins.

The reports were first spotted by AppleInsider in the Hacker News forum. According to the alerts they received, some unauthorized third parties attempted to access their accounts from various parts of the world, such as Brazil. Fortunately, those attempts were thwarted because of the suspicious geographic origin.

Most of the LastPass accounts that got the alert appear to be outdated. Furthermore, the developers behind one of the best password managers for Android told AppleInsider that the login attempts were related to “credential stuffing.” This activity is used by bad actors to gain access to user accounts using details obtained from other services that were involved in a previous third-party breach.

In a statement posted on LastPass’ official Twitter account, LastPass vice president of product management Dan DeMichele said the warning message was likely sent by mistake. “Our investigation has since found that some of these security alerts, which were sent to a limited subset of LastPass users, were likely triggered in error. As a result, we have adjusted our security alert systems and this issue has since been resolved,” he said.

That said, LastPass assures customers that it continues to monitor the situation. It also maintains that there’s currently no evidence pointing to compromised accounts.

The company’s statement may be enough to allay the fears of users who may have panicked after receiving the alert. However, it won’t hurt to remain vigilant and bolster their password manager’s security measures.

Related posts

Latest posts

AMD’s next-gen GPUs to go on sale next month

Early product listings confirm that the RX 9070 GPUs will go on sale starting March 6

I wore 3 smart rings and flew 10,000 miles, this is the best

Have you ever wondered how traveling affects your body? In particular, not just the symptoms and effects that you can immediately feel, but rather, the nuances that technology can help you understand. When was the last time you took a flight, didn’t sleep enough, and ended up feeling extremely tired for days on end? To […]

How long is the Galaxy S25 battery life?

Thanks to its software optimizations and better hardware, the Samsung Galaxy S25 can comfortably go on for a full day

We’re entering the medical era of wearables

Smartwatches do well selling to consumers, but future devices will focus on medical-grade accuracy to court B2B healthcare sales.

Apple is ‘Ramping Up’ Work on a New Studio Display

Apple is "ramping up" work on a new Studio Display, according to Bloomberg's Mark Gurman.In his Power On newsletter today,

Apple Maps Might Start Showing Ads

Apple is "exploring" the idea of showing search ads in the Apple Maps app, according to Bloomberg's Mark Gurman.Back in

Pro Display XDR 2 and Larger iMac: Here’s What the Latest Rumors Say

In his Power On newsletter today, Bloomberg's Mark Gurman briefly touched on the future of the Pro Display XDR and

Chrome tab groups now allow mobile-desktop sync, and it’s utter chaos

Do I want to see my mobile tab groups on PC? Yes, but only the work stuff. My Reddit memes on desktop? Oh, heck no. It also acts very weird, as per irked users.

I tried a stylus with location tracking. It ruined Apple Pencil for me

The ESR Geo Digital Pencil adds Apple Find My support at a fraction of the Apple Pencil's sticker price. Is it reliable? Let's just say ESR schools Apple!

Google Pixel phone’s Emergency SOS sent a person’s nudes to friends

The emergency assistance system on Pixel phones can also record videos and share it with your friends and family members. You can choose to disable it, though.