- GoTo has provided an update as regards a breach that it announced last year.
- Encrypted backups from several GoTo enterprise products were stolen as were encryption keys.
- GoTo says it is contacting affected customers directly.
At the end of November 2022, GoTo (formerly LogMeIn) announced that it had suffered a breach. On Monday GoTo provided an update as part of its ongoing investigation and, well let’s just say there is cause for concern as it’s not just LastPass that was affected.
The company has now said that a threat actor was able to lift encrypted backups from a third-party storage service. The backups that were stolen were from:
- Central
- Pro
- join.me
- Hamachi
- RemotelyAnywhere
But wait, it gets worse.
“We also have evidence that a threat actor exfiltrated an encryption key for a portion of the encrypted backups. The affected information, which varies by product, may include account usernames, salted and hashed passwords, a portion of Multi-Factor Authentication (MFA) settings, as well as some product settings and licensing information. In addition, while Rescue and GoToMyPC encrypted databases were not exfiltrated, MFA settings of a small subset of their customers were impacted,” GoTo reports.
The firm says it is contacting affected customers directly to provide additional information and recommend actionable steps they can take. The passwords of those users and MFA settings are being reset as a precaution.
“In addition, we are migrating their accounts onto an enhanced Identity Management Platform, which will provide additional security with more robust authentication and login-based security options,” GoTo adds.
This breach has been monumentally bad for GoTo. Not only was LastPass customer information compromised, now the firm’s enterprise customers are in a precarious position. Furthermore, these customers have their own customers who could now potentially be in a dangerous situation.
The incident has already drawn harsh criticism from cybersecurity experts when it was made public and with this latest revelation, we have to wonder how GoTo’s reputation will suffer as a result.
Should be a GoTo customer using the products above, it might be best to start considering alternatives. We also recommend keeping an eye out for possible breaches on your own perimeter as the amount of data that was exfiltrated from GoTo really is alarming.
