LastPass Customer Data Stolen in Third-Party Breach as Security Incidents Mount Globally
A Klue breach exposed access tokens for customers including LastPass, letting attackers pull data from Salesforce and other integrations, including customer names, phone numbers, emails, physical addresses, support case data, and sales-related data. LastPass says its infrastructure and password vaults weren’t affected; separately, John Bolton (77) pleaded guilty with a plea deal recommending no more than 5 years and a $2.25M fine, and sentencing is set for Oct. 28, 2026.