Password manager Dashlane says hackers stole some customers’ password vaults

Dashlane said attackers brute-forced its two-factor authentication during a weekend intrusion.

Hackers accessed about 20 customer accounts and downloaded at least a dozen encrypted password vaults.

The company says the vaults are still encrypted, but users with weak master passwords may remain at risk.

The incident highlights the long-tail danger of stolen vaults even when direct decryption does not occur.