mSeven Software tells current and former mSecure password manager customers to change passwords, reset two-factor authentication and remove passkeys after suspicious activity, according to BleepingComputer
mSeven Software, maker of the mSecure password manager, told current and former customers in a security notification sent on 3 November 2026 that it "recently learned of suspicious activity associated with the mSecure password management application", launched an investigation, took steps to mitigate the issue and engaged external cybersecurity experts, according to BleepingComputer, which was shown the notice.
The notice urges customers to immediately protect confidential information stored in the password manager: "This may include changing passwords, resetting or re-enrolling two-factor authentication methods, or removing existing passkeys."
BleepingComputer says the notice did not say what systems were compromised, whether customer data was stolen or how many users were affected, and that mSeven had not answered its questions. (source: BleepingComputer)
- Product
- mSecure password manager (mSeven Software)
- Versions
- n/a — organisation security incident
- Exploited in Australia?
- unknown
- Patch to
- mSecure users: follow mSeven's advice — change the passwords stored in mSecure (most important accounts first), reset or re-enrol two-factor authentication whose secrets mSecure held, and remove and recreate passkeys; use a strong, unique master password.