Hacker News Reader

Does this affect customers who deleted their account before the breach ? I can't find info on LastPass

I have the same question. I migrated away from LastPass 2 years ago and wonder if I’m still breached

After they've already been shown to have been dishonest previously, and after they chose to make an additional disclosure on the last working day (for most) before Christmas, I think you have to assume your data is at risk, and act accordingly. I certainly would.

Do you trust them to tell the truth about whether all your data was reliably, securely, and permanently deleted? Can they tell you when and how?

You’re right I’m assuming my account was breached and I’m resetting my passwords.I already started noticing hack attempts (e.g. reset password attempts) this week, so that indicates it’s likely to have been breached.

I used lastpass reluctantly, knowing the risk but also knowing it was better than re-using passwords.

What a fun way to spend christmas holiday resetting passwords

Reply on news.ycombinator.com