Array
GoTo, the parent company of password management service LastPass, has revealed that hackers stole some customers’ encrypted data during a security breach in November.
The breach, which stemmed directly from one that occurred in August, allowed an “unauthorized party” to gain access to some customers’ information stored on a third-party cloud storage service shared by LastPass and parent GoTo. Company data stolen in August that was then used in November to break into another LastPass database to capture unencrypted customer data like names, email and billing addresses, phone numbers, and IP addresses. No unencrypted credit card data was exposed, the company said.
Now, GoTo says some of its other enterprise products have been affected by the hack, including the theft of encrypted customer backups — copies of data emergency recovery — for Central, Pro, join.
