It appears Oregon state law allows for up to 45 days for a breach to be fully detailed to consumers .....

I have had an account for years (now premium) and yet I did not receive the email about the data breach.  I only found out about it since my wife, who also has an account, received the email. I wonder if there is any significance to the selection of who received the email.

OK, as others many questions.

I have never synced to the cloud, only between my devices. Am I still in danger?

WHICH versions of mSecure are affected? I use an older version! 

I did change mSecure password on all devices and all including Mac work and sync between them.

And agree, a despicably worded email with little to no  information. Will post this same in all threads I care to follow until we know more. I am not about to start changing 400 passwords.

I moved to Proton Pass about 6 months ago, glad I did.  However I may still be screwed since I hadn't fully deleted everything from my mSecure 7 account as a backup...

We really need mSecure to chime in here and give us all some answers about who and what was effected.   Perhaps they are digging in and still dont know the severity of the data breach...  But this doesnt look good, and if they are saying we need to all change every password...was it all E2EE anyway?  Did they store the keys to decrypt for us instead of it living on our devices?  What is going on

I'm  dumping msecure. The communications have been unacceptable in a time where cybersecurity is so vulnerable.

We have a nightshift here because of the great unknown msecure created for us, they probably have sweet dreams now :-(

 Have always been impressed with the app and it support team. Sadly a major fail in explaining the details of the issue and a lack of specific solutions to a major issue for its customers

MS 365 reached out to let me know someone is trying to get into my outlook. My 2fa caught it.  Guys get out of this software. Looking at other companies in the market. Any suggestions?

Go open source (Keepass) or go old school. A simple encrypted document with passwords. I am deeply disappointed in how this handled. Msecure is past, they messed up so much in their comms, that there is  o way back for them. Almost 24 hrs no reply, no explanation, NOTHING. It’s criminal behavior. A total lack of responsibility. We lost a night on this junk. And we still have no green idea on what ground we’re standing. It is getting a very costly adventure for us. Maybe it’s time to start gathering information about who owns the company, who are involved etc. This is a total disaster.

Any Reply from this company ?

@John

no, and I expect they will simply vanish and we’ll never know what really happened