Important Security Notice Nov 3, 2026 : mSecure Support

Stuart

hat ein Thema begonnen etwa 3 Stunden vor

Please provide more context to your email below advising there has been a security breach.
It is not acceptable to offer the vague advice "take steps".
Please state what remedial action is required, and what data was compromised.

mSeven Software (“mSeven”) recently learned of suspicious activity associated with the mSecure password management application. In response, mSeven quickly launched an investigation, took steps to mitigate the issue, and engaged external cybersecurity experts to assist. You are receiving this email because you are a current or former mSecure customer.

Given the potential security implications, mSeven recommends that you immediately take steps to protect all confidential information stored within the mSecure password management application. This may include changing passwords, resetting or re-enrolling two-factor authentication methods, or removing existing passkeys.

M

Matthew

gesagt etwa 2 Stunden vor

I am holding my powder dry. If their email got hacked through a php zero day, this will blow over. Meantime use this as an opportunity to do a security assessment, war game simulation. With quantum computer decryption as a future possibility, having a plan would be prudent.

G

Graham

gesagt etwa 1 Stunde vor

For s secure service company to have the reported type of breach and not put it on their own website, i think it is just a scam. I dont believe it

L

Luca

gesagt etwa 1 Stunde vor

I have just received the deeply disturbing mail as others in this thread, and have several essential questions: What happened? Which systems were affected, when did the incident begin, and when was it contained? Were customer vaults accessed or exfiltrated? Is there evidence of actual exposure, or is this still hypothetical? Was encryption key material compromised? Including Account Keys, authentication QR codes, encrypted keys or anything that could facilitate offline attacks. Does the advertised zero-knowledge architecture still hold? If so, what is the technical justification for recommending wholesale credential replacement? Why reset MFA and remove passkeys? Has mSeven identified a specific risk to stored authentication secrets, or is this a blanket precaution? Is mSecure Cloud currently safe? Can customers safely store newly rotated credentials, or could they be exposing them to an unresolved vulnerability? Does changing the mSecure account password actually rotate the underlying encryption key? If not, what remediation is necessary? Please provide feedback asap, your app and system are supposed to be safe and it is not a joke changing dozens of password across multiple accounts.

F

Frederik

gesagt 42 Minuten vor

I am suspecting this to be a hack at the source code. No communictaing as they are still investigating. If teh source code is compromised they will likely have access to whatever you entered.
I have just blocked all of my credit and bank cards and I am changing the passwords. This cost me time but also money. Every piece of information that moves away from mscure is never returning. But what happened here can happen to all PW managers. I think I'll move back to an excel sheet.

J

Jacky

gesagt 39 Minuten vor

Thank you for your warning.

Does this mean that I have to change every single password etc. in mSecure, or just the access to mSecure itself?
I am not a highly computer-literate young person and am very concerned .

D

Dave

gesagt 8 Minuten vor

I too received the same email early this morning. It appears too, that the mSecure app on my MAC is no longer working. The icon in the dock has a question mark superimposed over it and clicking on it does nothing.

D

Dave

gesagt 7 Minuten vor

Is does appear as though the app on my iPhone is still working fine.