I assume that any data sent and stored on the mSecure Cloud is vulnerable and in the hands of a third party. There is no de facto public statement from mSecure to state just how vulnerable that data is.
- Are our private keys compromised via the app or database?
I was also using msecure's cloud and have turned that off and canceled my sub. I worked to get everything moved over to icloud keychain since I still need some way to sync across multiple platforms.
I've also started to change some passwords but that's a big job that may take some time. Thankfully I've realized that a lot of the important accounts already send an email or text for OTP when logging in even if they don't yet have 2FA enabled. So, I won't fret too much about making sure they're all changed so long as my email accounts are secure.
Hi Everyone,
Due to the mSecure Cloud breach email that was previously sent out this week, we are dealing with a high volume of tickets which makes it difficult for our team to answer all of the questions that have come in our forum. I want to acknowledge that we are seeing all of these responses, but our first priority is to answer all of the emails that have been flooding into our ticket system. Since we are focusing our manpower on our ticket system to answer questions about this breach, If you have any questions about this issue, please send all of your questions to "support@msevensoftware.com". I will tell you right now that the response to your email will be delayed due to the high volume, but at least this way we will eventually get to your ticket and will try our best to answer your questions rather than sitting in our forum.
Thank you everyone for your patience and please know we are trying our absolute best to answer your questions as fast as we can.
Stuart
It is not acceptable to offer the vague advice "take steps".
Please state what remedial action is required, and what data was compromised.
mSeven Software (“mSeven”) recently learned of suspicious activity associated with the mSecure password management application. In response, mSeven quickly launched an investigation, took steps to mitigate the issue, and engaged external cybersecurity experts to assist. You are receiving this email because you are a current or former mSecure customer.
Given the potential security implications, mSeven recommends that you immediately take steps to protect all confidential information stored within the mSecure password management application. This may include changing passwords, resetting or re-enrolling two-factor authentication methods, or removing existing passkeys.
26 personas tienen esta pregunta