Password managers are under threat in 2025. What the LastPass breach taught us.

Back in August 2022, password manager LastPass suffered a massive breach.A still-unknown cyber criminal successfully targeted one of LastPass' four DevOps engineers who had access to the decryption keys for the cloud storage service. Using the engineer's stolen credentials, the hacker was able to infiltrate LastPass' systems undetected. This breach lasted for months and continued even after LastPass believed the threat had been contained. The LastPass breach enabled the threat actor to obtain access to the "backup customer vault data." According to the company, encrypted data such as usernames and passwords as well as unencrypted data like website URLs were affected.Breaches at large companies and online platforms are not new. In the case of the LastPass breach, hackers don't need to find some technical flaw to exploit either. SEE ALSO: Have you been impacted by a scam or security breach? By targeting the human beings who work at these companies, using tactics such as social engineerin...