Email Urges mSecure Users to Change Passwords After Suspicious Activity
Summary
An email sent in mSeven Software’s name urged current and former mSecure customers to change passwords and consider resetting 2FA and removing passkeys after unspecified suspicious activity. The company had not publicly confirmed it by Nov. 3, and exposure remains unpro
Key points
- An email sent in mSeven Software’s name on Nov. 3 says the company learned of suspicious activity linked to mSecure; it does not explain what happened or confirm that vault data was accessed.
- The email advises customers to change passwords and consider resetting 2FA and removing passkeys, but does not clarify which accounts or stored items those steps concern.
- The email says an investigation began, steps were taken to limit the problem, and outside cybersecurity experts were engaged.
- As of 18:00 UTC on Nov. 3, mSeven had not posted about the email on its X or Facebook accounts, and no staff member had replied in the support-forum thread where a recipient shared it.
- mSecure says vault data is encrypted on the customer’s device before syncing; the article says the email does not establish whether suspicious activity reached vault data or its protective keys.
- A BSI study published in December 2025 found that mSeven could theoretically access stored data in mSecure 6.1.5 for Android; the study tested only that version.
Article Details
- Event Type
- mSeven Software warned current and former mSecure customers of suspicious activity linked to the app and advised them to consider changing passwords, resetting two-factor authentication, and removing passkeys.
- Impact
- The email did not say what happened or whether stored vault data or its protective keys were accessed. The scope, timing, affected systems, and whether the activity had stopped were not disclosed. mSeven said it had begun an investigation, taken steps to limit the problem, and engaged outside cybersecurity experts.
Vendors
Products
mSecureCustomers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords, resetting two-factor authentication (2FA), and removingmSecure CloudmSecure can sync a customer's vault through mSecure Cloud, Dropbox, iCloud or Wi-Fi. The email does not say whether it matters which of these a customer uses.