LastPass confirms data breach in Klue supply chain attack

LastPass confirmed hackers accessed customer data in its Salesforce environment using OAuth tokens stolen from third-party vendor Klue. Customer vaults and stored credentials were not affected. Exposed data includes names, phone numbers, email addresses, physical addresses, support records, and sales CRM data.