Last Updated on October 30, 2023 by Bitfinsider

According to reports, a 2022 data breach that affected the password storage program LastPass caused at least 25 people to witness $4.4 million in cryptocurrency being taken out of 80 wallets.

Proximous on-chain researcher ZachXBT and MetaMask developer Taylor Monahan monitored the fund transfers of at least 80 wallets that were compromised on October 25, according to a post made on Oct. 27 on X (Formerly Twitter).

In a report that accompanied the Chainabuse, Monahan stated that “the majority, if not all, of the victims are longtime LastPass users and/or confirm having stored their crypto wallet keys/seeds in LastPass.”

LastPass said in December 2022 that an attacker had targeted a LastPass employee by using data that had been taken in an August breach. The attacker managed to obtain the employee’s credentials and decrypt client data that had been saved.

An encrypted backup of client vault data was also taken, and LastPass issued a warning that this material might be decrypted if the attacker used brute force to guess the master password for the account.

Cybersecurity writer Brian Krebs revealed in a September blog article that over $150 victims had over $35 million worth of cryptocurrency taken from some of the LastPass client vaults, which appeared to have been breached.

A class-action lawsuit was filed against LastPass in January by those who said that the August 2022 hack caused about $53,000 worth of Bitcoin to be stolen.

ZachXBT suggested in his most recent X post that anyone who has ever kept a private key or wallet seed in LastPass should “migrate your crypto assets immediately.”