LastPass Confirms Data Breach Tied to Klue Supply Chain Attack

LastPass confirmed that hackers accessed customer data from its Salesforce environment after stealing the company’s OAuth tokens in the Klue supply chain attack disclosed earlier this month. The incident ties LastPass to the broader Klue compromise that has already affected other organizations using the Klue Battlecards integration. Affected customers should review Salesforce access logs for anomalous activity tied to OAuth grants from the Klue integration and treat any data accessible through that integration as exposed.