LastPass-owner GoTo says hackers have taken customer data from other products

LastPass owner GoTo has given an update on the November 2022 security incident wherein the remote collaboration and IT software company spotted an unusual activity within its development environment and third-party cloud storage service. It said that, along with LastPass consumer data, hackers were able to get hold of data from its other enterprise products.

A threat actor exfiltrated encrypted backups, which include account holders’ usernames and passwords, as well as an encryption key for a portion of the encrypted backups, the company said in a blog post. The third-party cloud storage service is shared by both GoTo and its affiliate, LastPass.