Brute-force attacks bypassed 2FA on some Dashlane accounts on May 31, 2026, enabling fewer than 20 encrypted vault downloads.

As people take to social media after some accounts are disabled, Dashlane confirms it is monitoring brute-force attacks targeting an unknown number of users.

Engineers' weekends ruined as Dashlane's automatic protections kicked in