mSecure password manager hack: encrypted mSecure Cloud vault database reportedly stolen, users told to change passwords

mSeven Software emailed current and former mSecure password manager customers on November 3 saying it had learned of suspicious activity involving the app, had engaged outside cybersecurity experts, and urging them to protect what they store in it, which may include changing passwords, resetting or re-enrolling two-factor authentication and removing existing passkeys. The notice did not say what was compromised or how many users are affected. Support responses shared by customers say a hacker stole an encrypted database from mSecure Cloud, that only users syncing through mSecure Cloud are affected, and that there is no evidence the encrypted contents were accessed. Stolen vaults can still be cracked offline if the master password is weak, so mSecure Cloud users should change their master password and rotate the most important stored credentials, 2FA and passkeys.

Why this severity: Reported theft of an encrypted password-vault database; weak master passwords can be cracked offline

Started

Nov 3, 2026

• #Msecure
• #Mseven
• #Password Manager
• Data breach
• #Passkeys
• #2fa