LastPass reveals Klue supply‑chain breach exposed Salesforce customer data
LastPass disclosed that threat actors used stolen OAuth tokens from Klue's integration to pull customer data from its Salesforce environment. The breach did not affect core vaults, but highlights risks of SaaS supply‑chain attacks and prompted a full token revocation and tighter third‑party controls.