Feds Link $150M Cyberheist to 2022 Last Pass Hacks
Summary: A U.S. Secret Service seizure complaint filed March 6 in northern California states that the FBI and Secret Service agree with 2023 research linking a $150 million cryptocurrency heist on Jan. 30, 2024 to master passwords cracked from LastPass vaults stolen in 2022. Prosecutors seized roughly $24 million in cryptocurrency clawed back after the theft, which blockchain researcher ZachXBT attributed to Ripple co-founder Chris Larsen, and the filing says the stolen password from the victim's online password manager account was used to access his crypto wallet.
Why it matters: Researchers Nick Bax and Taylor Monahan found the victims had stored crypto seed phrases in LastPass Secure Notes and were often among LastPass's oldest customers, whose master passwords carried far fewer encryption iterations; LastPass says law enforcement has shown it no conclusive evidence tying the thefts to its breach.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026