Dashlane explains how attackers managed to download encrypted password vaults

The report describes an incident where attackers obtained encrypted Dashlane vaults; while strong, high-entropy master passwords make successful decryption unlikely, the risk rises if users used weak or commonly leaked master passwords. The report compares the event to the 2022 LastPass breach (where some vaults were ultimately decrypted due to unencrypted fields and weak hashing), criticizes Dashlane's initial communication, and recommends affected users change master passwords and vault contents as a precaution.