Sometimes you see stuff in the media and wonder if it’s really news. Some celebrity broke up with some other celebrity. Some tech company released version X.Y which is .0001% better. LastPass was hacked again. Some athlete said the wrong thing. There’s a new kpop band.
You see these pieces and wonder why anyone bothered reporting them. Take a random example: LastPass was hacked. Um…so what? Isn’t this just continually happening? What a waste of electrons to write a story about it.
I’m being sarcastic. But not really.
LastPass was hacked in 2011, 2015, 2016, 2017, 2019, 2021, and now in 2022. I believe they’re trying to be more consistent.
This year’s annual hack was rather mild:
Two weeks ago, we detected some unusual activity within portions of the LastPass development environment. After initiating an immediate investigation, we have seen no evidence that this incident involved any access to customer data or encrypted password vaults.
We have determined that an unauthorized party gained access to portions of the LastPass development environment through a single compromised developer account and took portions of source code and some proprietary LastPass technical information. Our products and services are operating normally.
You think maybe that developer had a poor password or was recycling passwords…
You know what’s amazing? There isn’t even a security incident section on Wikipedia for some competing products (e.g., 1Password).
If you use LastPass, switch.
Related Posts:
Five Times When Updating Your OS Would Have Saved You From Being Hacked
The Mother of All Supply Chain Attacks! Is 1Password Safe?!? (UPDATED)
Get Ready to Scan Your Passport If You Want to Buy a VM This Summer
My Server Was Getting Constantly Hacked Until I Changed This One Parameter
No, 'airforce' is Not a Good Password: Check Out This Honeypot
Motherboard MSI Warns of Rogue Firmware

Raindog308 is a longtime LowEndTalk community administrator, technical writer, and self-described techno polymath. With deep roots in the *nix world, he has a passion for systems both modern and vintage, ranging from Unix, Perl, Python, and Golang to shell scripting and mainframe-era operating systems like MVS. He’s equally comfortable with relational database systems, having spent years working with Oracle, PostgreSQL, and MySQL.
As an avid user of LowEndBox providers, Raindog runs an empire of LEBs, from tiny boxes for VPNs, to mid-sized instances for application hosting, and heavyweight servers for data storage and complex databases. He brings both technical rigor and real-world experience to every piece he writes.
Beyond the command line, Raindog is a lover of German Shepherds, high-quality knives, target shooting, theology, tabletop RPGs, and hiking in deep, quiet forests.
His goal with every article is to help users, from beginners to seasoned sysadmins, get more value, performance, and enjoyment out of their infrastructure.
You can find him daily in the forums at LowEndTalk under the handle @raindog308.
LastPass hit piece?
lastpass is open about it’s incidents. The other password managers? no they don’t..they have to be shamed otherwise they deny deny deny..if you are using something other than lastpass or bitwarden..switch.
Hi Paul, what would make it a hit piece?
https://www.youtube.com/watch?v=8vIq2Gc6SSE
lastpass does not keep your master password so even if lastpass got owned(which they didn’t0 the chances of getting into your encrpyted vault is neglible.