Hackers stole customers' encrypted data during a November 2022 security breach of GoTo, the parent company of password manager LastPass, CNET reports. The breach was a direct result of an August 2022 breach, in which an “unauthorized party” accessed a shared GoTo-LastPass cloud storage service. In November, hackers used the stolen data to access unencrypted customer files.