{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T19:10:46.198Z",
  "tag": {
    "id": "dashlane",
    "label": "Dashlane",
    "isStack": false,
    "url": "https://pwn.watch/t/dashlane",
    "feed": "https://pwn.watch/t/dashlane/feed.xml"
  },
  "counts": {
    "incidents": 1,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 0
  },
  "incidents": [
    {
      "slug": "dashlane-2fa-bruteforce-june",
      "title": "Dashlane 2FA brute-force; encrypted vaults for <20 accounts",
      "url": "https://pwn.watch/i/dashlane-2fa-bruteforce-june",
      "json": "https://pwn.watch/i/dashlane-2fa-bruteforce-june.json",
      "status": "closed",
      "severity": "unknown",
      "patchStatus": "partial",
      "product": "Dashlane",
      "tags": [
        "dashlane"
      ],
      "cveIds": [],
      "affectedVersions": [
        "Accounts with 6-digit 2FA targeted in the campaign"
      ],
      "fixedVersions": [],
      "startedAt": "2026-05-31",
      "closedAt": "2026-06-15",
      "updatedAt": "2026-06-15",
      "summary": "Beginning May 31 2026 attackers brute-forced six-digit 2FA codes to register new devices on Dashlane accounts and downloaded encrypted vaults for fewer than 20 personal accounts. Dashlane said its own systems were not compromised and worked with affected customers.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": []
}