mSeven Software says an unauthorized actor obtained an encrypted copy of a database containing information about current and former users of its mSecure password manager.
The company said the incident affects only people who synchronized their data through mSecure Cloud, according to a response reproduced on its support forum on November 4.
mSeven said it has no evidence the attacker accessed confidential information stored in the encrypted database. The response did not identify the specific records involved or disclose how many users were affected. It also did not explain how the unauthorized actor obtained the copy. An earlier incident involving encrypted Dashlane password vaults likewise showed that a copied encrypted vault is distinct from confirmed access to its contents.
The company said it had taken additional steps to strengthen security and had no evidence that mSecure was currently unsafe to use. It also said deleting the application would not change the situation after the database copy had already been acquired. BleepingComputer’s report on the support response likewise noted that mSeven had not explained how the breach occurred.
The clarification expands on mSeven’s earlier warning to current and former customers about suspicious activity involving the password manager, which Abijita reported on November 4.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
