Dashlane Brute-Force Attack Downloads <20 Encrypted Vaults
Dashlane disclosed a brute-force campaign beginning May 31 that targeted user accounts by attempting to bypass 2FA and register new devices. Attackers successfully downloaded encrypted password vaults belonging to fewer than 20 personal plan users. The vaults remain protected by master passwords; affected accounts were suspended, restored, and users notified.
- encrypted password vaults
A brute-force campaign against Dashlane beginning May 31, 2026, resulted in the unauthorized download of fewer than 20 encrypted password vaults belonging to personal-plan users. The password-management service disclosed that attackers attempted to bypass two-factor authentication and register new devices, ultimately gaining access to a small number of protected vaults before the company suspended and restored the affected accounts.
Public reporting indicates the incident was limited in scope. Dashlane stated that the encrypted vaults remain protected by users’ master passwords and that all impacted individuals have been notified. The company has not identified any evidence that the attackers decrypted the vaults or accessed the passwords inside them. Industry research from sources such as DoxxScan™ continuous monitoring indicates that credential-stuffing and brute-force attempts against password managers continue to rise even when strong encryption is in place.
Want the rest of this breakdown?
Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary Warden™ to see if their identity is exposed in the breaches we cover.
A breach leaks your credentials. Then hackers chain those credentials to your address, family, phone, and employer using public broker sites. We’re the only tool built around that chain.
⚠ Were you in this breach?
Free email scanner. We check your address against 15.4B+ leaked records (including this breach) in 15 seconds — then show you the $19 cleanup that removes you from the broker sites aggregating leaked data.
Check my email — free →
