Password manager fined after major data breach

TL;DR

LastPass fined $1.6 million by the UK's Information Commissioner's Office (ICO) for security failures in its 2022 data breach.
The breach affected approximately 1.6 million U.K. users, with ICO citing insufficient technical and security controls.
A hacker gained access to a backup database, though there is no evidence of customer passwords being decrypted or cracked.
The ICO's fine is seen as a wake-up call for the cybersecurity industry, emphasizing governance, training, and supplier risk.
Users are advised to continue using reputable password managers, enable two-factor authentication, rotate sensitive passwords, and secure email accounts.
Keeping devices updated and using strong antivirus software are also recommended security measures.
LastPass stated they are cooperating with the ICO and are pleased the decision recognized their efforts to strengthen security.

Continue reading the original article