#3
BleepingComputer
general
June 23, 2026 at 13:58 UTC
LastPass confirms data breach in Klue supply chain attack
By Bill Toulas
AI Summary
LastPass confirmed that attackers accessed customer data from its Salesforce environment after stealing the company's OAuth tokens in the Klue supply chain attack earlier in June 2026. This expands the scope of the Salesforce/Klue OAuth token compromise, now affecting a major password manager's customer data. Security teams should assess any third-party SaaS vendors using Klue for potential exposure and review OAuth token permissions across their Salesforce integrations.
Relevance score: 89.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →