Benzinga - A crypto thief managed to steal $4.4 million worth of crypto in a single day as the toll from the LastPass breach continued to escalate.
The LastPass breach, first disclosed in 2022, has resulted in at least $35 million in crypto theft. The most recent heist added another $4.4 million to the total, CoinTelegraph reported.
On Oct. 27, 2023, on-chain researcher ZachXBT and MetaMask developer Taylor Monahan traced the fund movements of 80 wallets compromised on Oct. 25.
“Most, if not all, of the victims are longtime LastPass users and/or confirm having stored their [crypto wallet] keys/seeds in LastPass,” Monahan revealed in a Chainabuse report.
In December 2022, LastPass announced that an intruder had used information from a previous breach in August to target a LastPass employee, obtaining their credentials and decrypting stored customer data.
A backup of encrypted customer vault data was also stolen, which LastPass cautioned could be decrypted if the attacker successfully guessed the account's master password.
Earlier this year in January, LastPass faced a class-action lawsuit from individuals alleging that the August 2022 breach led to the theft of approximately $53,000 in Bitcoin (CRYPTO: BTC).
ZachXBT strongly advised anyone who has ever stored a wallet seed or private key in LastPass to immediately transfer their crypto assets.
Engineered by Benzinga Neuro, Edited by Pooja Rajkumari
© 2023 Benzinga.com. Benzinga does not provide investment advice. All rights reserved.