A threat actor compromised a LastPass software engineer’s laptop, gaining access to the company’s cloud-based development environment and stealing source code, internal secrets, and customer data over several months. The adversary used this information to conduct a series of attacks post initial breach. The attack led to the theft of encrypted customer passwords, usernames and associated data. The criminal activity was obscured using VPN services and anti-forensic measures. The precise initial breach remains unknown.

Illumina Cybersecurity Case A 'Warning' To Medical Industry – Law360
Illumina Cybersecurity Case A ‘Warning’ To Medical Industry Law360