Another LastPass security breach traces back to a compromised vendor

Hackers compromised Klue, a third-party vendor used by LastPass, stealing OAuth tokens to access LastPass customer data in Salesforce and Gong. Exposed details include names, emails, phone numbers, addresses, and support records. LastPass said its core password vaults were not affected.