Cloud-based password manager LastPass said its network has been breached and attackers stole personal information as well as salts and hashes. The attackers compromised LastPass account email addresses, password reminders, per-user salts, and authentication hashes. LastPass advised users to change master passwords and enable multifactor authentication. The company said encrypted user vault data was not taken, nor were user accounts accessed. The breach is in the process of notifying customers by email of the breach, which is being handled by email.
Source: https://threatpost.com/lastpass-network-breached-calls-for-master-password-reset/113324/