mSecure password manager encrypted database stolen
Original title: mSecure password manager hack prompts password reset warnings
mSeven Software warns customers who synced with mSecure Cloud to change passwords and remove passkeys after an encrypted database was stolen.
mSeven Software discovered suspicious activity on its mSecure password manager. An encrypted database containing customer vaults was stolen from its cloud service. The company states it cannot access decrypted contents but has no evidence the attacker accessed them. Only users who synced via mSecure Cloud are affected, and it implemented additional security measures.
Unconfirmed: Number of affected users and exact breach method remain undisclosed by mSeven Software.
- Affected users synced with mSecure Cloud
- Company engaged external cybersecurity experts
- No details on number of impacted users
- mSecure uses AES-256 with zero-knowledge architecture
Impact: Stolen encrypted customer password vaults
- 1.Change all passwords
- 2.Reset or re-enroll two-factor authentication
- 3.Remove existing passkeys
- Vendors
- mSeven Software
- Products
- mSecure password manager
From the original article
3 min read at bleepingcomputer.com
mSeven Software is warning current and former mSecure password manager customers to change passwords, reset two-factor authentication, and remove passkeys following a cyberattack that reportedly exposed an encrypted customer database. [...]
By Lawrence Abrams · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.