mSecure password manager incident: maker mSeven tells customers to change stored passwords, reset 2FA and remove passkeys after 'suspicious activity'; vault exposure unknown

On 3 Nov 2026 mSeven Software emailed current and former customers of the mSecure password manager saying it 'recently learned of suspicious activity associated with the mSecure password management application', started an investigation, took steps to mitigate and brought in outside cybersecurity experts. It recommends that customers immediately protect all confidential information stored in mSecure: change passwords, reset or re-enroll two-factor authentication, and remove existing passkeys. The email does not say what happened, when, whether it has stopped, how many customers are affected, or whether vault data or the keys protecting it were accessed. It also does not say whether the sync method (mSecure Cloud, Dropbox, iCloud, Wi-Fi) matters. Customers posted the email on mSecure's support forum. As of 18:00 UTC on 3 Nov mSeven had said nothing on its X or Facebook accounts. Reported by The Register, heise and The Hacker News.

Summary written from the sources below. Check the originals before acting.