Can't make sense of Dashlane's vault theft notification? You're not alone.

Dashlane disclosed a brute-force attack beginning May 31, 2026 that targeted two-factor authentication protections to register unauthorized devices on user accounts. Attackers successfully downloaded encrypted password vaults of fewer than 20 personal plan users , with the stolen vaults requiring the Master Password to unlock.

Source: Ars Technica | 2026-06-03