LastPass Says Hackers Stole Account Data

LastPass disclosed a network breach on June 12 in which attackers stole customer email addresses, stored password reminders, and password hashes; the company asserts that encrypted vault data and user accounts were not accessed. LastPass is urging users with weak master passwords to change them and to enable two-factor authentication, while warning customers to be vigilant for phishing attempts and the potential for offline attacks against the stolen hashes.