Related to the August incident, the password management tool LastPass once again experienced data leakage.

CTOnews.com news on December 1, citing foreign science and technology media The Verge reported that the password management tool LastPass data leakage incident again. Karim Karim Toubba, the company's chief executive, said in a blog post today that the hackers accessed LastPass's third-party cloud storage servers and obtained key information about some of their customers.

The picture is from The Verge Tuba. In the blog post, it is not clear exactly what information the hackers stole or how many users were affected. "because of LastPass's zero-knowledge (Zero Knowledge) architecture, our customers' passwords are still securely encrypted," Tuba said in a blog post. CTOnews.com learned that the so-called zero-knowledge architecture is that only the user knows the master password, encryption occurs only at the device level, not on the server side, and LassPass will not know it.

LastPass had a source code leak in August and admitted that hackers had accessed LastPass's internal systems. The attacks this month should have something to do with the August incident. Tuba said the hackers "used the information obtained in the August 2022 incident" to gain access to user data.