mSecure Support
Important Security Notice Nov 3, 2026
I am holding my powder dry. If their email got hacked through a php zero day, this will blow over. Meantime use this as an opportunity to do a security assessment, war game simulation. With quantum computer decryption as a future possibility, having a plan would be prudent.
For s secure service company to have the reported type of breach and not put it on their own website, i think it is just a scam. I dont believe it
I have just received the deeply disturbing mail as others in this thread, and have several essential questions:
What happened? Which systems were affected, when did the incident begin, and when was it contained?
Were customer vaults accessed or exfiltrated? Is there evidence of actual exposure, or is this still hypothetical?
Was encryption key material compromised? Including Account Keys, authentication QR codes, encrypted keys or anything that could facilitate offline attacks.
Does the advertised zero-knowledge architecture still hold? If so, what is the technical justification for recommending wholesale credential replacement?
Why reset MFA and remove passkeys? Has mSeven identified a specific risk to stored authentication secrets, or is this a blanket precaution?
Is mSecure Cloud currently safe? Can customers safely store newly rotated credentials, or could they be exposing them to an unresolved vulnerability?
Does changing the mSecure account password actually rotate the underlying encryption key? If not, what remediation is necessary?
Please provide feedback asap, your app and system are supposed to be safe and it is not a joke changing dozens of password across multiple accounts.
Stuart
It is not acceptable to offer the vague advice "take steps".
Please state what remedial action is required, and what data was compromised.
mSeven Software (“mSeven”) recently learned of suspicious activity associated with the mSecure password management application. In response, mSeven quickly launched an investigation, took steps to mitigate the issue, and engaged external cybersecurity experts to assist. You are receiving this email because you are a current or former mSecure customer.
Given the potential security implications, mSeven recommends that you immediately take steps to protect all confidential information stored within the mSecure password management application. This may include changing passwords, resetting or re-enrolling two-factor authentication methods, or removing existing passkeys.
5 people have this question