LastPass Hackers Swipe Millions in Crypto

Crypto News Exploits

Hackers Drain Millions in Crypto Using Stolen LastPass Vaults

Written by Aaron S.,

Editor-In-Chief

Last Updated: December 17, 2024

Key Takeaways

Cybercriminals stole $5.36M from LastPass users on December 17, converting funds to ETH and hiding tracks via instant exchanges;
SEAL warns that passwords and seed phrases stored in LastPass before 2023 remain at risk;
Total losses from the 2022 LastPass breach now approach $45M.

Stop overpaying - start transferring money with Ogvio. Sign up, invite friends & grab Rewards now! 🎁

Hackers Drain Millions in Crypto Using Stolen LastPass Vaults

BITDEGREE IN YOUR SOCIAL FEED

Cybercriminals stole $5.36 million from around 40 victims who used the password manager LastPass.

Blockchain investigator ZachXBT shared on December 17 that the stolen funds were converted to Ethereum ETH $3,098.75 and then moved across instant exchanges to hide their tracks.

He also provided evidence of the attack on Chainabuse, a platform for reporting scams.

What is a DAO in Crypto? (Animated Explanation)

Did you know?

Want to get smarter & wealthier with crypto?

Subscribe - We publish new crypto explainer videos every week!

The security group Security Alliance (SEAL) warned in a December 16 post on X that any passwords or seed phrases stored in LastPass before 2023 remain at risk.

SEAL urged affected users to transfer their assets immediately, saying, "Move your assets before hackers move them for you”.

This incident relates to a major LastPass data breach in December 2022. During the breach, hackers accessed a backup of customer vault data stored in secured storage.

By September 2023, reports showed losses of over $35 million in cryptocurrency. Adding the recent $5.36 million theft and another $4.4 million incident on October 25, the total losses now approach $45 million.

Unfortunately, the LastPass breach is not the only recent incident in crypto security. On December 13, a Ledger wallet user lost 10 Bitcoin BTC $89,963.60 , valued at approximately $1 million, and $1.5 million in NFTs due to a phishing attack. How did the hacker pull it off? Read the full story.