mSecure Urges Password Resets After Reported Theft of Encrypted Customer Database
Summary
mSeven urged current and former mSecure customers to change passwords and reset authentication after a reported theft of an encrypted mSecure Cloud database. The company says it has no evidence the attacker accessed vault contents.
Key points
- mSeven said it discovered suspicious activity involving mSecure and launched an investigation with external cybersecurity experts.
- Customer-shared support responses reportedly said a hacker stole an encrypted database from mSecure Cloud; the reported theft has not been independently confirmed in the article.
- The company reportedly said it had no evidence the attacker accessed confidential information in the database.
- The reported incident affected customers who synchronized password databases through mSecure Cloud.
- mSeven advised current and former customers to change passwords, reset or re-enroll two-factor authentication, and remove existing passkeys.
- The article notes that stolen encrypted vaults may still be at risk of offline cracking if master passwords are weak.
Article Details
- Victim Organization
- mSeven Software
- Incident Type
- Reported theft of an encrypted customer database from mSecure Cloud
- Disclosure Date
- 2026-11-03
- Data Types Exposed
- Encrypted password database
- Information belonging to current and former mSecure users
- Operational Impact
- mSeven urged current and former customers to change passwords, reset or re-enroll two-factor authentication, and remove passkeys. The reported incident was limited to users who synchronized their databases through mSecure Cloud. The company reportedly said it had no evidence that attackers accessed information within the encrypted database.
- Claim Status
- alleged