LastPass breach victims lose $4.4m in a day

In a single day, at least 25 people lost cryptocurrency worth $4.4 million from 80 wallets. The incident followed a data leak from the LastPass password manager in December 2022.

\n\n\n\n

Just on October 25, 2023 alone another ~$4.4M was drained from 25+ victims as a result of the LastPass hack.

Cannot stress this enough, if you believe you may have ever stored your seed phrase or keys in LastPass migrate your crypto assets immediately. pic.twitter.com/26HsxrlnCb

— ZachXBT (@zachxbt) October 27, 2023

\n\n\n\n

On-chain sleuth going by the nickname ZachXBT said that, together with MetaMask developer Taylor Monahan, he is tracking the movement of funds from addresses compromised on Oct. 25.

\n\n\n\n

Here’s all of the related addresses myself and @tayvano_ collected from Oct 25. https://t.co/hsXaUi8Fhg

If you suspect you were already a victim of the LastPass hack send a DM with the txn hashes of the theft.

— ZachXBT (@zachxbt) October 27, 2023

\n\n\n\n

\n

“Most, if not all, the victims are long-time LastPass users and/or confirm that they stored their keys or seed phrases in the service,” Monahan said in a Chainabuse report.

\n

\n\n\n\n

Earlier, LastPass confirmed that attackers gained access to the encrypted data of the password vault. The developers assured that the information remains confidential thanks to the zero-knowledge disclosure architecture.

\n\n\n\n

In September, cybersecurity journalist Brian Krebs wrote that experts found cryptocurrency theft totaling more than $35 million affecting about 150 confirmed victims. All of them were LastPass users.

\n\n\n\n

\n

“The profile of the victims is the most striking. They are all sufficiently security-conscious. They are deeply embedded in this ecosystem, including employees of reputable crypto organisations, venture capitalists, people who built DeFi protocols, deployed smart contracts, and operated full nodes,” Monahan said at the time.

\n

\n\n\n\n

According to researchers, as a result of the LastPass data leak, an an employee of the well-known analytics firm Chainalysis lost several million in digital assets. The firm confirmed the incident but declined to comment.

\n\n\n\n

In the third quarter of 2023, the crypto industry lost about $889.3 million due to hacks, fraud and rug pulls, Beosin reported.