Not a law firm.We connect people affected by data breaches with independent attorneys.

Incident information

Are You an mSecure User? Learn About Your Options After the November 2026 Data Breach

Information about this incident and a simple way to see if you may qualify to be connected with independent attorneys.

What happened

mSeven Software, the Lake Oswego, Oregon-based developer of the mSecure password manager, emailed current and former mSecure customers on November 3, 2026 about suspicious activity linked to the app. The email said the company had started an investigation and brought in outside cybersecurity experts, and urged customers to change their master password and stored passwords, reset two-factor authentication methods and replace passkeys.

In a later response to customers, which was posted on the mSecure support forum and reported by security media, mSeven said that:

An unauthorized actor acquired an encrypted copy of a database containing information belonging to current and former mSecure users
The issue pertains to users who synced with the mSecure Cloud
The company has no evidence that the unauthorized actor accessed the confidential information stored within the encrypted database
It has taken steps to bolster security to help prevent future unauthorized activity

BleepingComputer, The Hacker News and The Register reported on the incident. mSeven has not said how many people were affected or when the activity took place.

If you are, or were, an mSecure customer who synced your vault with the mSecure Cloud, you can see if you may qualify to connect with an independent attorney.

Possible remedies

Possible remedies, if any, depend on the facts of your situation and applicable law. No outcome or payment is guaranteed.

Official source

Read the original public notice or report about this incident (opens in a new tab):

https://www.bleepingcomputer.com/news/security/msecure-password-manager-hack-prompts-password-reset-warnings/

See if you may qualify

Did you use mSecure with mSecure Cloud sync? See if you may qualify to connect with an independent attorney.

First nameLast nameEmail addressPhone (optional)State of residenceBriefly describe how you were affected (optional)

Optional. Please do not include Social Security numbers, dates of birth, account numbers, or medical details.

I agree to the Terms and Privacy Policy and consent to DataBreachRelief.com sharing my information with one or more independent law firms, who may contact me about my potential claim by email or phone. I understand this does not create an attorney-client relationship.Optional: I agree to receive calls/texts, including automated, from DataBreachRelief.com and partner law firms at the number provided. Consent is not a condition of service. Msg & data rates may apply. Reply STOP to opt out.

Thank you. Your information has been received. If a participating law firm is interested in your situation, they may contact you.

Sorry, something went wrong and your information was not sent. Please try again.

DataBreachRelief.com is not a law firm and does not provide legal advice. We are an independent information and referral service. Information you submit may be shared with one or more independent law firms that may contact you about your potential claim. Submitting information does not create an attorney-client relationship. Listing an incident does not mean a lawsuit has been filed, and no outcome is guaranteed. Attorneys who receive referrals may pay us a fee for advertising or lead services.