LastPass parent company GoTo confirms user password backups and encryption keys have been leaked

GoTo, the parent company of the password management service LastPass, warned users in November 2022 that it was investigating a security incident, and now GoTo has released the latest findings, confirming that the encryption key backed up by the user’s password was stolen by an attacker, including the account name. , processed passwords, and multi-factor authentication configurations, the passwords and multi-factor authentication configurations of affected users have been reset.