Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded

Dashlane experienced a brute-force attack that successfully bypassed two-factor authentication protections, allowing attackers to register unauthorized devices and access encrypted user vaults. While fewer than 20 users were affected and the data remains encrypted with Master Passwords, this incident highlights critical weaknesses in authentication controls and attack detection. The breach demonstrates that even security-focused companies must implement robust rate limiting, device registration controls, and real-time monitoring to prevent credential-based attacks. Organizations using password managers should recognize that these services remain high-value targets requiring additional protective measures.