Security advisory leaves out key details. Dashlane maintains complete silence.

As people take to social media after some accounts are disabled, Dashlane confirms it is monitoring brute-force attacks targeting an unknown number of users.

Engineers' weekends ruined as Dashlane's automatic protections kicked in

Multiple Dashlane users have been locked out of their accounts following brute-force attacks that attempted logins from distant locations and unknown devices.

Brute-force attacks bypassed 2FA on some Dashlane accounts on May 31, 2026, enabling fewer than 20 encrypted vault downloads.

Dashlane has been targeted in a brute-force attack campaign that resulted in a limited number of encrypted vaults being downloaded.

The trouble began on Sunday, May 31, when Dashlane users started reporting suspension emails and login problems. Some said they were suddenly unable to access their vaults,...

The password manager giant said hackers were able to 'brute-force' its two-factor system, allowing them to access customer accounts and download their password vaults.

Attackers bypassed Dashlane's 2FA on fewer than 20 accounts by brute-forcing numeric codes, downloading encrypted password vaults. Zero-knowledge encryption protects data if…

Security advisory leaves out key details. Dashlane maintains complete silence.

Security advisory leaves out key details. Dashlane maintains complete silence.

By targeting large numbers of users, attackers increased their chances of success.