Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

LastPass

Disclosed Jun 23, 2026Confirmed

Official notice

LastPass support case data stolen via Klue OAuth tokens

LastPass said attackers used OAuth tokens stolen in the Klue breach to access its Salesforce environment and take customer contact details and support case data. Vaults and core products were not affected.

What is known

People affectedNot stated in the sources we have
DisclosedJun 23, 2026
AttackSupply chain
Data exposedNamesPhone numbersEmailsAddressesMessages
SectorTech · US
StatusConfirmed
Part ofKlue (2026)

Sources

Official noticeblog.lastpass.com
Klue supply chain incident and LastPass response
Newsbleepingcomputer.com
LastPass confirms data breach in Klue supply chain attack

Notices filed

TotalJun 23
ResearchCount not stated

Same campaign

8x8Supply chain exposed names, addresses, phone numbers, emails and internal documents.Supply chainTechUSJun 23KlueSupply chain exposed credentials and tokens, API keys, names, emails and messages.Supply chainTechCAJun 19

Other breaches at LastPass

Attacker steals LastPass customer vault backups after earlier dev breachHacking exposed names, emails, phone numbers, addresses, IP addresses, passwords, credentials and tokens and source code.Hacking1.6M affectedTechUSNov 30, 2022
History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about LastPass