Technician

Hackers who stole data from the LastPass password manager last summer also stole encrypted passwords. The company announced it Thursday in a security update.

LastPass discovered in August that its software’s source code and technical information had been stolen. The theft allegedly took place at an external storage service used by the company.

LastPass initially reported that no customer data or passwords were captured in the attack. Last month it emerged that the hackers had stolen usernames, addresses, email addresses, phone numbers and IP addresses. It now appears that the hackers also gained access to the password vaults via a diversion.

According to LastPass, affected users need not worry about passwords being stolen. These are encrypted and, according to the company, can only be decrypted with a so-called master password. This doesn’t store LastPass, but users own it.

The password manager recognizes that hackers could crack passwords via a so-called brute force-attack. A hacker then uses software that tries different combinations of login names and passwords.

But according to LastPass, cracking a file master password determined according to password manager guidelines and consists of twelve characters lasts millions of years. People who have a shorter password or use it elsewhere are advised to change it.

It is unclear how many users are affected. Users who haven’t received an email needn’t worry, according to the password manager.

The problems started just after noon. Rabobank confirms the malfunction via Twitter and with an alert in the Rabobank app.

Customers who open the app see a white screen and can’t do anything else. Internet banking also doesn’t work. Users complain on Twitter that they only see a white screen in the online environment.

The cause of the malfunction is not yet clear. Rabobank says on Twitter work hard to a solution.