LastPass hit by new data breach - 4 steps you should take now

LastPass customers were impacted by a breach at third-party vendor Klue in which attackers stole OAuth tokens and used them to exfiltrate CRM and contact data (names, emails, phone numbers, addresses, and support/sales details) from Salesforce; multiple companies were affected and ransomware group Icarus has claimed responsibility, while LastPass says master passwords and vaults were not compromised and has revoked tokens and restricted access.