mSeven Software has told current and former mSecure customers to protect credentials stored in its password manager after detecting suspicious activity, but it has not said whether customer vaults were accessed.
In a November 3 notice posted to its support forum, the company said it launched an investigation, took steps to mitigate the issue and engaged external cybersecurity experts.
mSeven’s notice said the potential response may include changing stored passwords, resetting or re-enrolling two-factor authentication methods, and removing existing passkeys. It did not identify the suspicious activity, disclose when it occurred, or specify which information may have been exposed.
The Register, which reviewed the customer email, reported that mSeven had not answered questions about whether customer information was accessed. Customers discussing the notice on the company’s forum have asked for clarification about the incident’s scope and whether the warning applies to vault contents.



