Dashlane says attackers stole some customers' encrypted password vaults
Dashlane says about 20 accounts were accessed after attackers brute-forced 2FA to register new devices and download vaults.
By Ryan Merket · Published
Primary source: TechCrunch
Why it matters
Password managers concentrate sensitive credentials in one place by design. Dashlane says this was not a backend breach, but attackers still got encrypted vault files after defeating account-level 2FA controls.
Dashlane says attackers accessed about 20 customer accounts and downloaded at least a dozen encrypted password vaults after brute-forcing its two-factor authentication system, according to TechCrunch and Dashlane's own security advisory.…