Skip to content

Back to the catalog

mSecure password manager hack prompts password reset warnings
bleepingcomputer.comarticle

mSecure password manager hack prompts password reset warnings

mSeven Software told current and former mSecure password manager customers on 3 November 2026 to change passwords, reset two-factor authentication and remove passkeys after a cyberattack. Customers report support replies saying an encrypted database from mSecure Cloud was stolen, affecting only users who synced through the cloud. The notice gives no cause or victim count. BleepingComputer notes offline master-password cracking risk, as in the 2022 LastPass breach.

TL;DR mSecure's maker warns customers to reset credentials, 2FA and passkeys after an encrypted cloud vault database was reportedly stolen.
Open original ↗

Organisations named here

  • BleepingComputer
  • LastPass
  • mSeven Software

Technologies named here

  • LastPass
  • mSecure
  • mSecure Cloud
  • mSecure (mSeven Software), including mSecure Cloud sync

Standards and laws named here

  • AES-256

Techniques named here

  • Offline password cracking

Concepts named here

  • Lack of breach transparency
  • Weak master password risk
  • zero-knowledge architecture

Related in Threat Intel