I run the Cyber Security team for a well known Bank in the UK. I don't have any inside info about this but wanted to share what I was sent by mSecure team in case in helps with your triage of password resets.
"Earlier
this week, mSeven Software (“mSeven”) learned that an unauthorized actor
acquired an encrypted copy of a database containing information belonging to
current and former users of the mSecure password management application.
Importantly, mSeven has no evidence that the unauthorized actor has accessed
the confidential information stored within the database in the mSecure Cloud.
In
immediate response to learning this information, out of an abundance of caution
and in the interest of candor, mSeven notified current and former mSecure
customers and provided as much information as was reasonably available at that
time.
As
a standard best practice, mSeven continues to recommend that mSecure customers
change their master password, change vital stored passwords, reset two-factor
authentication methods, replace passkeys and any other sensitive information.
This should be a part of all routine security practices. However, as stated,
the database involved was encrypted and mSeven has no evidence that the
unauthorized actor has accessed the confidential information stored therein.
We
have taken steps to bolster security to help prevent future unauthorized
activity. Unfortunately, deleting mSecure will have no impact on this
situation. However, as stated, the database that is involved is encrypted and
mSeven has no evidence that the unauthorized actor has accessed the
confidential information stored therein.
Please
note, this issue only pertains to users that were synching with the mSecure
Cloud.
mSeven
takes the security and privacy of all information stored on the mSecure
platform very seriously and has no evidence that mSecure is not currently safe
for use. Our support team is working as fast as possible to respond to customer
questions. We take your trust in us seriously, and appreciate your patience and
continued support."
Paul
Good morning all,
I run the Cyber Security team for a well known Bank in the UK. I don't have any inside info about this but wanted to share what I was sent by mSecure team in case in helps with your triage of password resets.
"Earlier this week, mSeven Software (“mSeven”) learned that an unauthorized actor acquired an encrypted copy of a database containing information belonging to current and former users of the mSecure password management application. Importantly, mSeven has no evidence that the unauthorized actor has accessed the confidential information stored within the database in the mSecure Cloud.
In immediate response to learning this information, out of an abundance of caution and in the interest of candor, mSeven notified current and former mSecure customers and provided as much information as was reasonably available at that time.
As a standard best practice, mSeven continues to recommend that mSecure customers change their master password, change vital stored passwords, reset two-factor authentication methods, replace passkeys and any other sensitive information. This should be a part of all routine security practices. However, as stated, the database involved was encrypted and mSeven has no evidence that the unauthorized actor has accessed the confidential information stored therein.
We have taken steps to bolster security to help prevent future unauthorized activity. Unfortunately, deleting mSecure will have no impact on this situation. However, as stated, the database that is involved is encrypted and mSeven has no evidence that the unauthorized actor has accessed the confidential information stored therein.
Please note, this issue only pertains to users that were synching with the mSecure Cloud.
mSeven takes the security and privacy of all information stored on the mSecure platform very seriously and has no evidence that mSecure is not currently safe for use. Our support team is working as fast as possible to respond to customer questions. We take your trust in us seriously, and appreciate your patience and continued support."