24 June 2026 - 12:17
Category: Trust Issues
Another Day, Another LastPass Leak
LastPass contact data got exposed because their partner Klue lost their OAuth tokens. Because relying on others always ends so brilliantly.
Source: Help Net Security
The Full Story
It seems LastPass had their Salesforce contact data exposed because a third-party intelligence platform called Klue lost control of their OAuth integration tokens. This lovely mess affected LastPass customers whose standard CRM details were left open to whoever fancied a look. In a shocking display of actual IT admin work, they protected the remaining wreckage by revoking Klue's access and rotating the affected API tokens. Thankfully, master passwords and vaults were spared from this particular episode of supply chain incompetence.