Ouch!

Just got my mail from LastPass about their breach.

It’s early days yet but they’re saying it was just a development environment, and they’ve been quick in coming forward with the news.

Nothing yet to make me turn away from being a customer, though I do use Multi Factor Authentication on my account.

And don’t use the LastPass MFA app for my LastPass MFA codes.

But the big concern here is one of perception.

The password manager market is dominated by a small number of big players

And whenever you check reviews for LastPass, one of the main news items that comes up is their 2015 data breach.

So a second breach really hurts their brand, and ability to attract new customers.

It’ll be interesting to see how they handle this to limit the damage.