Same. Did compromised code get deployed? If so for how long before it was patched?

Change passwords, reset 2FA and remove passkeys? That's a week off work.

Please explain.

WHAT IS GOING ON MSECURE!  Please at least tell us if this is an app level hack (i.e. is it safe to open the app?), is it a server cloud hack, is it remove execution?

Changing passwords is fine if this is a precaution, if it's because the app is compromised we need to know before opening it!

I suspect that they are still in bed if they are based in Oregon

I have a related question about the November 3rd security notice. I do not use mSecure's cloud storage. My passwords are only stored on my phone and laptop. Does this security problem apply to me. In other words, can whatever security breach that occurred allow somebody to access my information stored only locally?

 If they are dealing with a problem that threatens the very name of their product ("secure") I doubt that they are in bed.

Same as other customers. Please provide more information!

Same issue, please provide more information on this incident!

Yes, some guidance is urgently needed.  For example, if I only used WiFi to sync between my desktop and phone am I somewhat protected?  Since the account password is also the key to the local database, does this mean I have to change all my passwords?  In the 100s!

The radio silence is alarming.

More details about the dates of your security breach and the length of time before msecure's mitigation took place is msecure's obligation to us, your paying customers.

As others have said it may be the mail system is compromised and the email was sent by the hackers.  Our data may or may not be at risk and the support team may not be on line yet

The email from mSecure was woefully lacking in details. As others have stated, I have received more detail from online retailers who have been hacked than from the company purportedly keeping our passwords safe! They repeatedly advertised that they use zero-knowledge architecture. If that's true, why the alarm?  They owe their subscribers more detailed information and specific steps to take to protect themselves. 

 I'm really annoyed at the lack of clarity as are other customers.  Sorry for the inconvenience?  Really?  How were the passwords stored at rest?  Unencrypted?

Come on msecure - you can and should do better with the advisory.