McMaster IT Notice: LastPass Security Incident

With safety in mind, McMaster IT Security Services is notifying our community about a recent cyber security incident related to a popular password management service called LastPass: https://www.lastpass.com/. Please be aware of this issue and the necessary precautions:

What happened?

On December 22, 2022, LastPass notified customers that a threat actor had accessed the company’s cloud-based storage environment and was also able to copy a backup of customer data.

What is LastPass?

LastPass is a popular password management service that creates and stores unique, secure passwords for various user accounts on websites across the Internet. LastPass is not a McMaster University service.

Who is impacted?

Anyone using the LastPass service is impacted by this incident.

What actions should I take?

LastPass is advising anyone not using the default settings best practices to change their master password and change the passwords for the websites they have stored in the service. For more information, please see the company’s Notice of Recent Security Incident.

Out of an abundance of caution, McMaster IT Security Services advises that anyone using LastPass change the passwords for any websites with sensitive information stored in the service. It is also recommended to enable multi-factor authentication for websites stored in LastPass.

Where can I learn more?

You can learn more about this incident by reading LastPass’s Notice of Recent Security Incident and related customer support resources.

Republish this Article for Free

Republish this Article

We believe in the free flow of information. This work is licensed under a Creative Commons Attribution-No Derivs 2.5 Canada (CC BY-ND 2.5 CA), so you can republish our articles for free, online or in print.

All republished articles must be attributed in the following way and contain links to both the site and original article: “This article was first published on Daily News. Read the original article.”

With safety in mind, McMaster IT Security Services is notifying our community about a recent cyber security incident related to a popular password management service called LastPass: <a href="https://www.lastpass.com/">https://www.lastpass.com/</a>. Please be aware of this issue and the necessary precautions:

<strong>What happened? </strong>

On December 22, 2022, LastPass <a href="https://blog.lastpass.com/2022/12/notice-of-recent-security-incident/">notified customers</a> that a threat actor had accessed the company’s cloud-based storage environment and was also able to copy a backup of customer data.

<strong>What is LastPass? </strong>

LastPass is a popular password management service that creates and stores unique, secure passwords for various user accounts on websites across the Internet. LastPass is not a McMaster University service.

<strong>Who is impacted? </strong>

Anyone using the LastPass service is impacted by this incident.

<strong>What actions should I take? </strong>

LastPass is advising anyone not using the <a href="https://support.lastpass.com/help/what-is-the-lastpass-master-password-lp070014">default settings best practices</a> to change their master password and change the passwords for the websites they have stored in the service. For more information, please see the company’s <a href="https://blog.lastpass.com/2022/12/notice-of-recent-security-incident/">Notice of Recent Security Incident</a>.

Out of an abundance of caution, McMaster IT Security Services advises that anyone using LastPass change the passwords for any websites with sensitive information stored in the service. It is also recommended to enable multi-factor authentication for websites stored in LastPass.

<strong>Where can I learn more? </strong>

You can learn more about this incident by reading LastPass’s <a href="https://blog.lastpass.com/2022/12/notice-of-recent-security-incident/">Notice of Recent Security Incident</a> and related <a href="https://support.lastpass.com/help/what-is-the-lastpass-master-password-lp070014">customer support resources</a>.

Media Enquiries

Phone: (905) 525-9140 ext. 24073
Email: comms@mcmaster.ca

The Communications and Public Affairs Office is staffed from 8:30 a.m. to 4:30 p.m. Monday to Friday.

The University has a broadcast quality television studio to facilitate live and pre-recorded interviews with media. Learn more about our experts.