Every day without a scope statement is a day the 'willful or grossly negligent' argument gets easier to make — and under certain state protections, that's 3x damages plus $750 per head, with the 72-hour clock turning on whether Account Key material was in that database. Telling us what was taken now is cheaper than explaining the silence later.
How is this proof that your vault was decrypted? If some random other entity was trying to change your passwords and failed because they don't have your current passwords, would that appear different in any way? Are these the only 4 passwords in your vault or are there others that aren't being attacked? Do you suppose that out of all mSecure users yours is the only vault decrypted? Not saying you vault wasn't cracked, but it does seem that there could be other potential causes for what you're observing. As one example, you don't by any chance have an AI agent installed on your computer do you?
You are right, I have no way to prove that the mSecure database breach is responsible for this. In answer to your questions:
- No, I do not use an AI agent (wouldn't even know how to set one up) and don't have AI running anywhere on any of my devices.
- Yes, to date these are the only four accounts where I've been made aware of attempts to get into them because of multiple 2-factor authentication requests showing up within a few hours of each other via text and email while I was out of the house with my family and not anywhere near a computer (so, wasn't me or anyone else in my household requesting them).
- No, I can't imagine that mine would be the only vault someone would want to break into.
All that said, the coincidence is certainly eyebrow raising. (I haven't used the Facebook and Instagram accounts in years - not a fan of social media.) Even if the attempted account break-ins had nothing to do with the mSecure breach, my trust in mSecure is gone. My family and I have now switched over to a different, third-party security audited password management app and requested a pro-rated refund from mSecure. We are still waiting to hear back from them on that request.
Cheers.
Sarah