LastPass notifies users of yet another data breach

LastPass has notified users of a breach at third-party market research firm Klue that exposed customer contact information, CRM data, and support case data, though password vaults were not affected. The company has revoked employee access to Klue, rotated exposed API tokens, and shared attacker IP addresses and email domains to help customers identify suspicious activity. This marks another security incident for LastPass following breaches in 2015 and 2022.