mSecure Password Manager Breach: Encrypted Customer Database Stolen, Users Urged to Reset Credentials
mSeven Software, maker of the mSecure password manager, notified current and former customers on November 3, 2026 of a cyberattack involving suspicious activity on its mSecure Cloud infrastructure. The company confirmed via customer support responses that an attacker stole an encrypted customer database from mSecure Cloud, affecting users who synchronized their vaults through that service. mSeven states it has no evidence the attacker accessed the decrypted confidential contents of the vaults, which use AES-256 encryption with a zero-knowledge architecture. Despite this, the company is urging all current and former customers to change passwords, reset or re-enroll two-factor authentication, and remove existing passkeys. Customers have criticized mSeven for limited transparency about how the breach occurred and the scope of impact.
Detalhes técnicos
The stolen data is an encrypted vault database from mSecure Cloud, the sync backend for the mSecure app. mSeven has not disclosed the attack vector, the number of affected users, or technical indicators. The risk highlighted is that stolen encrypted vaults can be cracked offline if users have weak master passwords, as seen in the 2022 LastPass breach, where attackers later used cracked vaults to steal cryptocurrency.
Remediação
Affected users are advised to immediately change stored passwords, reset or re-enroll two-factor authentication, and remove existing passkeys. Users should also strengthen their master password to mitigate offline brute-force/cracking risk against the stolen encrypted database.
Linha do tempo
-
mSecure Password Manager Breach: Encrypted Customer Database Stolen, Users Urged to Reset Credentials
ler a análise desta fonte ocultar
mSeven Software, maker of the mSecure password manager, notified current and former customers on November 3, 2026 of a cyberattack involving suspicious activity on its mSecure Cloud infrastructure. The company confirmed via customer support responses that an attacker stole an encrypted customer database from mSecure Cloud, affecting users who synchronized their vaults through that service. mSeven states it has no evidence the attacker accessed the decrypted confidential contents of the vaults, which use AES-256 encryption with a zero-knowledge architecture. Despite this, the company is urging all current and former customers to change passwords, reset or re-enroll two-factor authentication, and remove existing passkeys. Customers have criticized mSeven for limited transparency about how the breach occurred and the scope of impact.
Technical Details
The stolen data is an encrypted vault database from mSecure Cloud, the sync backend for the mSecure app. mSeven has not disclosed the attack vector, the number of affected users, or technical indicators. The risk highlighted is that stolen encrypted vaults can be cracked offline if users have weak master passwords, as seen in the 2022 LastPass breach, where attackers later used cracked vaults to steal cryptocurrency.
Remediation
Affected users are advised to immediately change stored passwords, reset or re-enroll two-factor authentication, and remove existing passkeys. Users should also strengthen their master password to mitigate offline brute-force/cracking risk against the stolen encrypted database.