mSecure Password Manager Security Incident Prompts User Warnings
mSeven Software advises customers to reset credentials and remove passkeys following reported database breach
Key Takeaways
- mSeven Software has issued warnings to mSecure customers regarding a cyberattack exposing an encrypted database.
- Users are advised to change passwords, reset two-factor authentication, and remove passkeys as immediate mitigation steps.
- The full scope, attack vector, and specific data exposed have not been confirmed.
- No software patch has been released; recommended actions are user-focused credential hygiene.
Quick answers
- What happened?
- mSeven Software has warned current and former mSecure password manager customers to change passwords, reset two-factor authentication, and remove passkeys following a cyberattack that reportedly exposed an encrypted customer database. The incident underscores ongoing risks for password management platforms.
- Which products are affected?
- mSecure
- What should defenders do?
- mSecure users should immediately change their master password, reset two-factor authentication enrollment, and remove any stored passkeys associated with the service. Monitor accounts for unusual activity and consider enabling additional authentication factors where available.
mSeven Software is warning current and former mSecure password manager customers to change passwords, reset two-factor authentication, and remove passkeys following a cyberattack that reportedly exposed an encrypted customer database. The notification, reported by BleepingComputer, indicates that the breach may have compromised sensitive credential data, prompting users to take immediate remedial action to secure their accounts. The company has not released a software patch, and mitigation efforts are focused on user-side credential and passkey management. Details regarding the attack vector, the specific data exposed, and the scale of the incident remain limited and unverified. The report notes that while the database was described as encrypted, the strength of the encryption and whether data was exfiltrated in readable form are unconfirmed. Former and current mSecure users are advised to rotate passwords, revoke and re-enroll two-factor authentication methods, and remove any stored passkeys associated with the service.
Security Details
A cyberattack reportedly exposed an encrypted customer database belonging to mSeven Software's mSecure password manager. The specific attack vector and extent of data exfiltration are unconfirmed. The company has advised users to change passwords, reset two-factor authentication, and remove passkeys as mitigation measures. No software patch has been released.
Affected products
mSecure
Mitigation
mSecure users should immediately change their master password, reset two-factor authentication enrollment, and remove any stored passkeys associated with the service. Monitor accounts for unusual activity and consider enabling additional authentication factors where available.
Sources
BleepingComputer
mSecure password manager hack prompts password reset warnings
Nov 4, 2026 · 16:00
Original link
Related Security News
DreamHost Confirms Data Breach Exposing FTP and Webmail Credentials
DreamHost has confirmed a data breach in which attackers gained unauthorized access to the company's File Manager platform for approximately two months. During this time, customers' FTP and SFTP usernames and passwords were stolen, and webmail sessions were exposed. The breach was disclosed on November 4, 2026.
Harvard University Alumni System Breach Exposes 851,000 Email Addresses
Hackers breached Harvard University's Alumni Affairs and Development systems in November 2025, stealing data linked to more than 850,000 unique email addresses. The breach was identified and reported via the Have I Been Pwned service in November 2026. The exposed information poses risks of phishing, credential stuffing, and targeted social engineering against alumni and university affiliates.
