LastPass

Disclosed Jun 23, 20263 months agoConfirmed

LastPass support case data stolen via Klue OAuth tokens

LastPass said attackers used OAuth tokens stolen in the Klue breach to access its Salesforce environment and take customer contact details and support case data. Vaults and core products were not affected.

What is known

People affected	Not stated in the sources we have
Disclosed	Jun 23, 2026
Attack	Supply chain
Data exposed	Names, Phone numbers, Emails, Addresses, Messages
Sector	Tech · US
Status	Confirmed
Part of	Klue (2026)

Sources

Source	Kind
Klue supply chain incident and LastPass responseblog.lastpass.com · Official notice	Official notice
LastPass confirms data breach in Klue supply chain attackbleepingcomputer.com · News	News

Notices filed

Where	Filed	People
Researchtotal	Jun 23

Same campaign

Organization	Disclosed	Attack	Sector	Status	Affected
8x88x8 says Klue integration abused to exfiltrate Salesforce customer dataJun 233 months agoSupply chain	Jun 233 months ago	Supply chain	Tech	Confirmed	Unknown
KlueKlue legacy credential breach leads to OAuth token theft and Salesforce raidsJun 193 months agoSupply chain	Jun 193 months ago	Supply chain	Tech	Confirmed	Unknown

Other breaches at LastPass

Breach	Disclosed	Attack	Sector	Status	Affected
Attacker steals LastPass customer vault backups after earlier dev breachNov 30, 20223 years agoHacking	Nov 30, 20223 years ago	Hacking	Tech	Settled	1.6M

History of this record

2026-09-25 · added · seed source

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about LastPass

What is known

Sources

Notices filed

Same campaign

Other breaches at LastPass

New breaches by email