mSecure Password Manager Warns Users After Suspicious Activity

mSeven Software urges mSecure users to change passwords, reset 2FA and remove passkeys after detecting suspicious activity, with reports of possible encrypted database theft from cloud service.

mSeven Software detected suspicious activity in the mSecure password manager and emailed current and former customers on November 3 urging them to change stored passwords, reset or re-enroll two-factor methods, and remove passkeys. The company started an investigation, reduced risk, and hired outside experts but has not disclosed what occurred, when it happened, or whether customer data was accessed. BleepingComputer reports an encrypted database containing customer vaults was stolen from the mSecure Cloud service, though the company states it cannot access decrypted contents and has no evidence the attacker accessed them. Only users who synced via mSecure Cloud are affected.