- mSeven says it learned of suspicious activity and found that an encrypted copy of a database with current and former users' information was taken. It says it has no evidence the attacker accessed the confidential contents.
- The company told customers the issue only pertains to users who synced through mSecure Cloud. It has not given a number of people affected. Deleting the app doesn't change anything.
- The vault is encrypted, but an attacker holding the file can keep guessing master passwords offline. A short or reused master password is the main risk.
- Set a new long, unique master password
- Change passwords for email, banking and other key accounts stored in it
- Reset two-factor codes kept in the app and replace stored passkeys
Useful?