LastPass customer data exposed through Klue supply chain attack

LastPass disclosed that compromised OAuth tokens from a third-party market intelligence platform, Klue, were used to access customer CRM data in its Salesforce environment; exposed information included business contact details and sales/support records. Multiple security vendors were affected, an extortion group (Icarus) claimed responsibility, and LastPass revoked access, rotated tokens, and published indicators of compromise while investigating with Klue and law enforcement.