Dashlane Says Hackers Stole Password Vaults Via a 'Brute Force Attack'

Dashlane said attackers used a brute-force attack against its two-factor authentication to register new devices on about 20 accounts.

The attackers then downloaded copies of encrypted password vaults, but Dashlane said its internal systems were not breached.

The incident exposed vault data for a small number of users and underscores risks around 2FA abuse and account recovery in password managers.