LastPass Breach Fuels Massive Crypto Heists: FBI Confirms Link

A 2022 LastPass breach, where hackers stole user master passwords, has led to a string of six- and seven-figure cryptocurrency heists. The FBI and Secret Service have confirmed a connection, stating that stolen passwords were used to access victims' crypto wallets. A $150 million theft from Ripple co-founder Chris Larsen resulted in $24 million being recovered. Security researchers found that victims were often older LastPass users with weak master passwords and had stored their crypto seed phrases in LastPass's "Secure Notes". LastPass denies direct responsibility, but experts criticize the company's response and urge users to improve password security practices.