As cited
Copy frozen at (site build).
identity access
Password manager mSecure tells users to change passwords, won't say why
Password manager mSecure warned customers on November 3 to change passwords, reset two-factor authentication, and remove passkeys after discovering suspicious activity, but declined to disclose what occurred or whether customer data was exposed. The vague guidance has frustrated users with hundreds or thousands of stored credentials, who demanded specifics on which secrets need replacement and what was actually compromised. The company engaged external security experts and stated it took mitigation steps, but has not answered questions from customers or media about the incident's nature or scope.
Why it matters: mSecure customers with credentials stored in the service face potential exposure and must decide whether to reset hundreds of passwords without knowing the actual attack scope; practitioners using mSecure for organizational or personal credential storage need clarity on whether their secrets were accessed before taking remediation steps.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
identity access
Password manager mSecure tells users to change passwords, won't say why
Password manager mSecure warned customers on November 3 to change passwords, reset two-factor authentication, and remove passkeys after discovering suspicious activity, but declined to disclose what occurred or whether customer data was exposed. The vague guidance has frustrated users with hundreds or thousands of stored credentials, who demanded specifics on which secrets need replacement and what was actually compromised. The company engaged external security experts and stated it took mitigation steps, but has not answered questions from customers or media about the incident's nature or scope.
Why it matters: mSecure customers with credentials stored in the service face potential exposure and must decide whether to reset hundreds of passwords without knowing the actual attack scope; practitioners using mSecure for organizational or personal credential storage need clarity on whether their secrets were accessed before taking remediation steps.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
identity access
Password manager mSecure tells users to change passwords, won't say why
Password manager mSecure warned customers on November 3 to change passwords, reset two-factor authentication, and remove passkeys after discovering suspicious activity, but declined to disclose what occurred or whether customer data was exposed. The vague guidance has frustrated users with hundreds or thousands of stored credentials, who demanded specifics on which secrets need replacement and what was actually compromised. The company engaged external security experts and stated it took mitigation steps, but has not answered questions from customers or media about the incident's nature or scope.
Why it matters: mSecure customers with credentials stored in the service face potential exposure and must decide whether to reset hundreds of passwords without knowing the actual attack scope; practitioners using mSecure for organizational or personal credential storage need clarity on whether their secrets were accessed before taking remediation steps.
- Source published
- First seen by Cybersecurity Tracker