Dashlane: encrypted password vaults stolen from some customers

Colleagues, a cybersecurity alert: Dashlane reports theft of encrypted password vaults from roughly two dozen customers.

- According to the company, attackers bypassed two‑factor authentication (brute‑forcing), registered new devices and downloaded copies of encrypted vaults.
- Dashlane says its systems were not breached and vaults are encrypted — decryption requires the customer's master password.
- Risk is especially high for users with easily guessed master passwords; the company has notified affected customers and is taking measures.

Why this matters: even password managers are vulnerable when master passwords are weak and 2FA is compromised. What steps have you taken to protect your vaults?

#cybersecurity #2FA #passwords #infosec