First of all, it is great to see that LastPass are making this incident publicly known, are being transparent with their users, and dealing with the problem head on. LastPass have clearly stated that the breach will not impact customers and they have adopted additional security measures. Disclosure of incidents should be applauded as they serve to educate the wider market to the potential risks and threats that could impact anyone, at any time.

This is why this incident should serve as a warning to all organisations as to the potentially devastating impact a single weak link in the armour could have. Businesses must operationalise their cybersecurity procedures, so that security resilience can be continually improved. If we take away just one learning from this incident it is that security processes and events within organisations need to be in a continuous state of ‘assess, detect, respond and automate’ in order to deal with these situations effectively.