LastPass admits attackers have a copy of customers’ password vaults

lol. this is the press release.

yesterday a Twitter thread was on HN front page proving that even extremely strong passwords were cracked, which I suspect is because their hacks that double encrypted things with the user's strong pass and with the employer's weak pass. or even lastpass own internal key so they can have recovery features for corporate clients