LastPass confirms data breach in Klue supply chain attack

LastPass confirmed that attackers accessed customer CRM data in its Salesforce environment after Klue — a third-party market intelligence provider — was breached and OAuth tokens were stolen. The Icarus extortion group claimed the supply-chain attack, which impacted multiple organizations and resulted in exfiltration of customer names, emails, phone numbers, addresses, support case information and sales/CRM data; LastPass says product vaults were not accessed and it has rotated tokens and notified law enforcement.