LastPass confirms data breach after Klue supply-chain attack

LastPass said attackers used OAuth tokens stolen during the Klue supply-chain attack to access customer data in LastPass’s Salesforce environment. Support case information and sales/CRM-related data may have been exposed. LastPass said its products, services, and infrastructure were not affected and that customer vaults remained secure.