Dashlane Discloses Brute-Force Attack Encrypted Vaults of Fewer Than 20 Users Downloaded
Following a brute-force attempt by an unidentified party, "fewer than" 20 users on the personal membership plan had their encrypted vaults downloaded, according to password manager Dashlane.
According to the firm, a "external" threat actor initiated a brute-force attempt against specific Dashlane user accounts on May 31, 2026, with the intention of circumventing two-factor authentication (2FA) safeguards and enabling the registration of new devices on pre-existing user accounts.
It's unclear exactly how many people were targeted, but Dashlane claimed that because of its built-in security measures, the huge frequency of attempts on those accounts resulted in temporary account suspensions and login problems.
The company has now disclosed that the attackers were successful in a few ...