GoTo Solutions disclosed a hack, also affecting LastPass

GoTo, remote access solutions and collaboration services, revealed that a security breach had disrupted their operations after threat actors intruded on their development infrastructure and third-party cloud storage system.

The tech firm sent email notifications to their customers to inform and warn them about an ongoing investigation related to the cyberattack. Moreover, GoTo Solutions stated that they are working with relevant authorities and cybersecurity teams to help them mitigate the incident.

 

A detected unusual activity in the development environment and third-party cloud storage system led to the discovery of the attack against GoTo Solutions.

 

An email sent by GoTo’s CEO, Paddy Srinivasan, stated that they began alerting law enforcement upon learning of the attack and have engaged with a cybersecurity team to instigate an investigation. From the initial findings, the affected third-party cloud storage is being shared by GoTo solutions and its affiliate company, LastPass.

LastPass shared that they were also affected by the cybersecurity breach, disclosing that malicious actors obtained access to its customer database through the same third-party cloud storage service that impacted GoTo. However, the password manager firm assured its customers that their passwords were safe from compromise due to the firm’s “Zero Knowledge architecture.”

Furthermore, reports revealed that this incident is the second time LastPass has experienced a cyberattack this year after they initially reported that a compromised developer user account had breached their development environment last August.

Despite the hack, GoTo Solutions said that their products and services are still functional. Nonetheless, incident investigations and mitigations would continually be ongoing in the background.

The tech firm has deployed enhanced security measures and threat monitoring features to ensure that similar security incidents would not reoccur. While security researchers have tried to get comments from GoTo, its management has yet to respond.

Users of both GoTo and LastPass are strongly advised to be vigilant against cyberattack threats from malicious entities.