Hackers used a backdoor through a little-known third-party app to steal LastPass customer data.

LastPass announced that hackers accessed customer data from its Salesforce environment after stealing the company's OAuth tokens in the Klue supply chain attack earlier this month.

LastPass notified customers that personal data and support cases were stolen after hackers breached Klue and used stolen OAuth tokens to access Salesforce.