Federal Criminal Record investigation
LastPass DevOps Engineer Home Breach & Vault Exfiltration

Adversaries compromised a senior DevOps engineer home computer by exploiting a remote code execution vulnerability in Plex Media Server, implanted keyloggers to capture master vault credentials, and exfiltrated encrypted customer password vaults from AWS S3 storage.

Loss Amount $35M
Techniques 3 Mapped
Threat Actor Individual