mSecure warns customers to reset credentials after security incident

mSeven Software urged current and former mSecure customers to change stored passwords, reset two-factor authentication and remove existing passkeys after discovering suspicious activity. Its November 3 security notice said it had begun an investigation, taken mitigation steps and engaged external cybersecurity experts. Customer-shared support responses reportedly said an attacker stole an encrypted database from mSecure Cloud and that the incident affected users who synchronized through that service. Those responses said the company had no evidence of access to confidential vault contents. Stolen encrypted vaults can nevertheless expose credentials if attackers crack weak master passwords offline.