Dashlane Password Manager Reveals Hackers Stole Some Encrypted Vaults Using Brute-Force Attacks

What Happened?

Dashlane says that an "external party" launched a brute-force attack against certain user accounts on May 31. The primary motive behind the cyberattack was to bypass the two-factor authentication (2FA) protections of user accounts, which would have allowed the hackers to register new devices against existing user accounts.

The company claims that its security protocols automatically locked accounts that were targeted by the attack. However, the hackers managed to exfiltrate encrypted password vaults of less than 20 "personal plan users".

Impact

Dashlane says that the stolen vaults remain inaccessible without the master password. The company has started notifying users whose accounts have been affected by the cyberattack and has blocked traffic from the bad actors.

The password manager claims that its internal systems have not been impacted as a result of the cyberattack. The company has taken steps to mitigate the risk of future incidents and continues to harden its resiliency.

What You Need to Know

Dashlane has notified affected users and has blocked traffic from the bad actors.

The stolen vaults remain inaccessible without the master password.

The company's internal systems have not been impacted.

Dashlane has taken steps to mitigate the risk of future incidents.

While the incident is concerning, Dashlane's swift response and measures to prevent future attacks are reassuring. If you're a Dashlane user, make sure to check your account and update your master password if necessary.

---

*Source context derived from original reporting via Google News Search.*

Source context derived from original reporting via Google News Search.