Breaches · 3h ago
On November 3, mSecure’s developer, mSeven Software, told customers to change passwords, reset two-factor authentication (2FA), and potentially remove passkeys after detecting suspicious activity tied to its password manager.
mSeven said it had opened an investigation but did not explain what triggered it or whether anyone’s stored secrets were exposed. Because the advice covers several ways to authenticate, customers cannot tell from the notice whether changing account credentials contains the risk or whether vault contents may also be involved.
If your organization relies on mSecure, that missing scope leaves responders unable to determine whether the concern is limited to account access or extends to credentials and other secrets stored in users’ vaults.
2 sources covering this story
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity
mSecure urged current and former customers to consider changing passwords, 2FA and passkeys after unspecified suspicious activity.
Password manager mSecure tells users to change passwords, won't say why
Customers left wondering what's been compromised after vendor advises resetting passwords, 2FA and passkeys
Part of the PlainSec briefing for 2026-11-03