It's unclear why Klue had not revoked the credential after the limited pilot, which hackers then used to breach a system holding keys for accessing customers' data.

This is the second data breach to affect LastPass customers in recent years, after one of the password manager's tech partners was recently breached.