LastPass data leak: Security experts call company’s claims as ‘blatant lies’

LastPass CEO Karim Toubba last week said that hackers who accessed a cloud-based storage environment in August of 2022 have gained a copy of consumer data, including names, email addresses, billing addresses and telephone numbers. The executive said that data of its customers remains safe due to unavailability of the master key. However, some cybersecurity experts have termed the company’s statement as “outright lies.”

“Statement full of omissions”
As per security researcher Wladimir Palant, the company’s “statement is full of omissions, half-truths and outright lies.” Palant says that LastPass is trying to present the August 2022 incident and the data leak as two separate events but this is actually a typical technique (called lateral movement) used by threat actors.