Attackers bypassed Dashlane's 2FA on fewer than 20 accounts by brute-forcing numeric codes, downloading encrypted password vaults. Zero-knowledge encryption protects data if master passwords are strong.

As people take to social media after some accounts are disabled, Dashlane confirms it is monitoring brute-force attacks targeting an unknown number of users.

Engineers' weekends ruined as Dashlane's automatic protections kicked in