The Vault Is Fine

I've spent a fair amount of time on this blog documenting what Bitwarden has been quietly doing to erode the trust that made them the default recommendation after LastPass started falling apart. That's a story about opacity and greed — price hikes buried in feature posts, a new M&A-specialist CEO they didn't announce, values language quietly rewritten in the dark. That's what I document in this series. LastPass is a different category of problem entirely. And it's been on fire longer than they told you. This week, LastPass sent users another breach notification. This one came through Klue, a market intelligence vendor whose platform integrates with Salesforce and Gong. Hackers got in and walked out with customer names, phone numbers, email and physical addresses, and support case data. LastPass is now recommending users stay alert for phishing and social engineering. The vaults weren't touched, they said — the same thing they always say. The Scorecard 2015: hackers obtained email…