Password vault mSecure reports suspicious activity and leaves customers in the dark about what happened
After 'suspicious activity', users must renew passwords, two-factor authentication and passkeys, while it remains unclear whether their vault was accessed.
mSeven Software, the US company behind the password manager mSecure, on Tuesday emailed customers asking them to protect the confidential data in the app. According to the email, which The Register has seen, the company detected suspicious activity linked to mSecure, launched an investigation with outside specialists and took mitigating steps. Customers may need to change passwords, reset two-factor authentication and remove existing passkeys.
What exactly happened, when, and whether anyone gained access to customers' vaults is not stated in the message. Cyber Security News reports that the warning also applies to former customers and that it is unclear which accounts, versions or storage options are at risk. On the support forum and on Reddit, users are asking for an explanation; some have hundreds of passwords stored in the app. mSeven did not respond to questions from The Register.
According to Cyber Security News, suspicious activity on its own does not prove that passwords were stolen or decrypted. The site recalls mSecure's own advice: changing the master password does not protect data that has already been copied, so passwords for important accounts such as banking are best changed directly with each service.