Ask HN: How did my LastPass master password get leaked?

Re:Ask HN: How did my LastPass master password get leaked? by RisingFusion on Monday December 27, 2021 @06:06PM (#29708056)

Same issue for me.

Time Monday, December 27, 2021 at 3:55 PM EST

Location UNITED STATES

IP address 154.202.117.78

Password is only used for lastpass. It was caught since I use 2FA. I did previously have "The Great Suspender" chrome extension, which changed hands and had an update including malware, I wonder if this was the culprit.

I last changed my master password on November 24, 2017, the previous exploit was apparently resolved in July 2016.

[ Parent | on HN ]

Re:Ask HN: How did my LastPass master password get leaked? by gregsadetsky on Monday December 27, 2021 @06:22PM (#29708204)

Wow. Truly insane to see all of these confirmations pile up.

And like you, my master password dates back to 2017.

So there was another exploit after 2016? Or a much more recent one?

I haven't used The Great Suspender in the past.

[ Parent | on HN ]