mSEVEN software, your reputation is quickly spiraling to the ground level. I would bet that if you actually showed that your customers matter with a prompt press release addressing our concerns then you may be able to save face with many of them. There are not a lot of choices out there for password managers and we all know NONE can prevent an attack especially as AI is used more and more against cyber targets. If you were able to clearly explain what happened and how we need to react then customers may choose to stick with you on the other side of this issue. As it stands now, you are WAY late on this as people are totally confused. 

For example, I back up my password locally with my home computer. Does this mean I need to anything? I never synced with the cloud, but obviously my main password to the app is managed by you so how does that affect me?

Get you heads out of your ass and address this issue ASAP and get some reasonable info out to the public as your future state as a company is in your hands.

We're 16+hrs since I received the email notice and still no information. I've been using mSecure for nearly 15yrs and am fed up with this piss poor response. At this point, since no information is being provided, I'm going to be forced to purchase a new password manager and add each account in to that as I reset passwords. I had hoped mSeven would be on top of this and communicate with their customers. They've been good at providing timely responses when I needed support in the past. Their response to this incident has been a total disaster and may even be the end of their product and company. Not necessarily because an incident occurred but because they've provide ZERO information and now have left all of their users hanging. Even a small company should be able to post some amount of information at 16+hrs in to an event like this. Unfortunate, but I now feel like I don't have much of a choice considering mSeven is sharing no information.

I received a response finally about 4 hours ago. This appears to be related to a security breach that resulted in an encrypted database being "acquired" by an unauthorized individual. The key information they provided me was this, "Please note, this issue only pertains to users that were synching with the mSecure Cloud.". Based on this it sounds like if you were not using mSecure Cloud for sync that this shouldn't impact you. I would still suggest reaching out to their support via ticket/email so you can ask questions related to your individual situation. I think this also leaves some explaining on mSeven's part about how this ultimately happened and whether or not the advertised security design truly matches reality in this scenario. It does sound like they are getting their teeth kicked in from the response to this event. I've been in a few outage/security breach situations in IT and can appreciate how hard responding to a situation like this can be, especially for a small team. While I have been disappointed in the delay in getting more information during the last 24 hours and now have questions about the security design of the mSecure Cloud sync feature. I do think they are trying to get back to users as quickly as they can. I've been with them for 15 years so I'll give them the benefit of another couple of days in the hopes more clarity comes out of this and I can make an informed decision on how to proceed. I wasn't using mSecure Cloud so hopefully the comment in the response I received is accurate and my situation isn't as dire as I originally believed. Regardless, I'm hoping mSeven will provide more details information publicly so we can all know where things stand with this incident and our data.