Password Manager news

Password manager Dashlane disclosed a security incident where an external attacker used a brute-force attack to bypass two-factor authentication. The attack resulted in the encrypted password vaults of fewer than 20 personal plan users being downloaded by the unauthorized party.

Attackers breached Dashlane's systems and downloaded fewer than 20 encrypted user password vaults. While the data remains encrypted, the incident highlights a vulnerability in the company's API that allowed for a coordinated brute-force campaign.