LastPass says customer data exposed in Klue supply chain breach

📅 23 June 2026 at 10:03 UTC📰 Cyber InsiderView original source ↗

LastPass has disclosed that customer contact and CRM data were exposed after attackers compromised Klue, a third-party market intelligence platform used by its go-to-market teams. According to a security advisory published by LastPass, the company was notified on June 12 about a breach at Klue, a competitive intelligence platform that integrates with Salesforce and Gong. … The post LastPass says customer data exposed in Klue supply chain breach appeared first on CyberInsider.

🤖 AI BriefingAuto-generated threat analysis

🔍Threat Overview

Klue, a third-party market intelligence platform used by LastPass's go-to-market teams, was compromised, exposing customer contact and CRM data. Attackers accessed OAuth tokens associated with the Klue integration to harvest Salesforce data.

⚙️Technical Details

Affected Systems

Salesforce environmentsKlue backend infrastructure

Attack Vectors

OAuth token abuseAutomated Python-based tooling

💥Impact Assessment

Severity: high

Who Is at Risk

Customers of Klue and LastPass, particularly those with Salesforce integrations

🛡️Recommended Actions

1Monitor for phishing emails and suspicious phone calls

2Verify the authenticity of any communication from LastPass or Salesforce

3Rotate exposed API tokens and review access controls

📦Affected Products

SalesforceKlue

Read the full article

This is a curated summary. The complete article is available at Cyber Insider.

Read on Cyber Insider ↗

← Back to feed