LastPass says some unauthorized login alerts were sent in error, no passwords were compromised
LastPass wants to assure its users that there has been no breach into its system. The statement follows reports that users were getting notified of unauthorized login attempts. Nikolett Bacso-Albaum, senior director of LogMeIn Global PR, initially said the alerts sent were related to "fairly common bot-related activity," involving malicious attempts to log into LastPass accounts using email and passwords bad actors sourced from past breaches of other third-party services. But they wanted to emphasize that the service wasn't compromised by an unauthorized party.
LastPass Vice President of Product Management Dan DeMichele sent a release to The Verge late Tuesday night with a detailed explanation of what happened, claiming at least some of the alerts were "likely triggered in error" because of an issue LastPass has now fixed.