Removed: nothing. The link between one employee’s personal cloud account and corporate resources stayed in place.
Outcome: attackers reached a cloud storage bucket through that federated link, which the company says partially enabled the breach.
The 2023 LastPass breach was partially enabled by attackers accessing a cloud storage bucket through federated access to an employee’s personal cloud account that was linked to corporate resources.
Source: LastPass, Security incident update and recommended actions (1 March 2023)