Tech
Password manager maker LastPass says hackers stole customer support case data during Klue breach
Password manager maker LastPass is notifying customers that their personal information and customer support case records were stolen during a recent hack at one of its technology partners, marking the company’s latest data breach in recent years.
In an email shared with TechCrunch from an affected customer, LastPass said the breach occurred at market research firm Klue, and not its own systems. However, hackers abused their access to obtain reams of data about LastPass customers.
LastPass is the latest in a growing list of cybersecurity companies that have reported data thefts as a result of the breach at Klue, which the company disclosed last week. Several other affected companies include HackerOne, Recorded Future, and Tanium.
In a blog post that shared information about the incident, LastPass said the hackers took customers’ names, phone numbers, email addresses, physical addresses, as well as customer support case data and sales-related data.
LastPass said the company’s own infrastructure was unaffected, including customers’ password vaults.
It’s not yet known what was in the contents of customer support tickets, although they likely contain fragments of potentially private or sensitive information. Customers typically contact customer service when they are having a billing issue or need assistance in gaining access to their accounts. Past incidents involving customer support tickets have included credentials and government-issued identity documents.
Spokespeople for LastPass did not immediately respond to TechCrunch’s request for comment, or questions about the incident, including how many customers are affected by the incident.
LastPass has more than 33 million users and around 1.6 million paying customers as of 2024, according to its website.
LastPass previously experienced a data breach in 2022, in which hackers stole the company’s entire store of customer password vaults, which are used to store their sensitive credentials, such as passwords, tokens, and other personal and credit card numbers.
While the vaults were encrypted with master passwords only known to the customer, the breach allowed hackers to brute-force and crack the vaults offline with the weakest master passwords, and subsequently access the secrets inside. Several crypto thefts were later linked to the LastPass breach, after hackers were suspected of stealing the victim’s wallet keys by cracking their password vault.
Klue CEO Jason Smith said in a blog post that the company identified hackers in its systems on June 12. A hacking and extortion group called Icarus took credit for the breach, and have publicly threatened to release the stolen data if a ransom isn’t paid.
Smith has not responded to TechCrunch’s emails about the incident, including how many customers are affected or if the company has been in contact with the hackers.
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Tech
OpenAI launches new initiative to help find and patch open source bugs
OpenAI announced a new initiative on Monday designed to help the open source community improve its cybersecurity game and ward off bugs.
“Patch the Planet” (which is a not-so-subtle allusion to “Hack the Planet,” the iconic catchphrase from the 1995 movie “Hackers”) will see OpenAI team up with the security company Trail of Bits to help open source maintainers secure their projects.
OpenAI said security staff from Trail of Bits will work directly with open source maintainers to review potential code issues. OpenAI’s security tools — like Codex Security — will be used to assist in the process.
“Many maintainers are already being asked to sort through more reports, more quickly, with the same limited time and resources,” OpenAI said Monday. “Patch the Planet is built to reduce that burden, not add to it: security engineers review findings before they reach maintainers, work with projects to develop patches and tests, and build reusable workflows that help teams continue improving security after the first fixes land.”
In other words, Trail of Bits engineers will function more or less like code EMTs — there to help open source project maintainers identify and triage potential issues, all supported by OpenAI’s software. It sounds like an ambitious project, and it’s somewhat unclear how it will function in the long term, or how it plans to scale up (if at all).
Open source projects are the digital bedrock upon which the commercial software industry rests, but, unfortunately, due to the decentralized and poorly monitored structure of that ecosystem, much of the software is insecure. Bugs in open source projects can turn into major problems for commercial codebases. The log4j debacle from several years ago — when a bad vulnerability was discovered in a widely used open source utility — is a good example.
Much of the concern surrounding tools like Mythos (Anthropic’s highly publicized security tool) seems to stem from the fact that AI can now automatically identify existing bugs within codebases and set about creating exploits for them. While the automation of cybercrime is not new, these tools undoubtedly have the potential to make it significantly more convenient for bad actors.
OpenAI is turning that formula on its head by using AI to help the open source community better protect itself. It’s hard not to read it as a competitive swipe at Anthropic, while also recognizing that it’s something the open source community desperately needs.
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Tech
Fika Jobs raises $4M to build a video-first hiring platform where AI agents interview candidates
The hiring process has long been criticized for its inefficiency and opacity. Candidates spend hours writing applications and submitting cover letters, only to disappear into what often feels like a black box. Generative AI has only made things messier, with employers increasingly relying on AI-powered screening systems to sift through an overwhelming number of submissions.
Stockholm-based startup Fika Jobs thinks there’s a better way. The company is building a video-first hiring platform that combines AI interview agents with short-form video profiles, creating something that feels like a cross between LinkedIn and TikTok. Instead of relying solely on resumes, candidates complete AI-powered interviews designed to showcase their personality and communication skills.
Fika Jobs announced on Tuesday a $4 million pre-seed round, which will be used to continue developing the platform, grow the team, and prepare for a wider launch later this year.
For job seekers, the process starts by connecting a LinkedIn profile. Fika’s AI reviews the candidate’s background and generates personalized interview questions. Candidates then complete a roughly 10-minute video interview with the AI agent, currently powered by Google’s Gemini models.
After the interview, Fika automatically turns responses into short video clips and organizes them into a profile. Instead of applying to every new role, candidates maintain a live profile that employers can discover and revisit as new opportunities arise.

The idea came from co-founders and brothers Jakob Dubois (CEO) and Alexander Dubois (CTO) while they were building their previous startup.
“When we were building [social app] Gaff, we spent a lot of time recruiting and almost passed on a candidate because his resume did not really stand out,” Jakob Dubois told TechCrunch. “We ended up speaking with him anyway, and within minutes, his grit, drive, and ambition became obvious. Exactly the kind of person we wanted to hire.”
That experience convinced the founders that some traits that employers care about most are difficult to capture on paper.
Unlike most competitors (Alex, Maki, and Mercor, among others) that focus on helping employers source, screen, and match candidates more efficiently with AI, Fika is building a platform where candidates maintain video-first profiles and employers browse a pool of people who have already been interviewed and evaluated by AI.
If successful, Fika Jobs could help employers assess communication skills and cultural fit early in the hiring process, complementing traditional resume and application reviews. This approach may be especially valuable for early-career professionals and candidates from non-traditional backgrounds, whose potential is not always apparent from a resume alone.
Of course, video profiles introduce real bias risks that are also worth acknowledging. When employers can see a candidate’s race, age, gender, physical appearance, and accent before evaluating their qualifications, it opens the door to discrimination that a resume, for all its flaws, at least partially obscures. There’s a reason some companies have moved toward blind resume screening.
The platform plans to open early access to candidates this week, with a broader public launch expected this fall. The company will initially focus on Sweden before expanding internationally. Fika currently has a small team but expects to reach around 10 employees by the end of the year.
More than 100 companies are on the waitlist, say the founders, though they declined to disclose which ones. Separately, they said more than 50 companies have tested the platform, including Plenty Labs, SICS.ai, Kognity, and Rebtel.
The platform is free for job seekers. Employers pay nothing up front, but Fika takes 10% of a candidate’s first-year salary upon a successful hire. (The company notes that this is lower than the 20% to 30% placement fees often charged by traditional recruiters and headhunters.)
The round was led by Luminar Ventures, with participation from Alliance VC and King co-founders Sebastian Knutsson and Riccardo Zacconi, the duo best known for creating the hit mobile game Candy Crush.
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Tech
Ribbie turns real-time baseball stats into arcade-like, pixel-art broadcasts
Whether you’re a baseball fan or not, there’s a lot to love about Ribbie, a vibe-coded website that turns real-time Major League Baseball (MLB) data into 8-bit broadcasts with arcade-style, animated pixel art.
“I love how much data is available to baseball fans […] but when I try to follow a game with ESPN Gamecast, I find it kind of boring,” Ribbie creator Eric Brownrout told TechCrunch.
Still, the idea for Ribbie didn’t materialize until Brownrout generated a pixel-art image of Phillies slugger Kyle Schwarber to use as his fantasy baseball team’s logo.
“I love the aesthetic, and started thinking about ways I might be able to apply it to a data or visualization tool,” Brownrout said. “A quick Google search revealed the MLB public StatsAPI, and I realized I could theoretically recreate an entire baseball game in the same pixel format.”

Like many other tech workers in San Francisco, Brownrout has now spent many nights experimenting with Claude Code. He stands out, though, because his tinkering yielded something that’s delightful.
“I used Claude Code and Codex extensively to turn a project that would have easily taken months into something I could build and launch in a few weekends,” he said. “I used Codex to build the image- and sprite-generation workflow, and Claude Code helped with the web app development. I’ve never built a video game before, so this was a new one for me.”
Visiting Ribbie — an onomatopoeia of the baseball stat RBI (runs batted in) — transports you to a pixel-art living room that shows which MLB games are being played, and you can select one to “watch” with Ribbie. (You can choose to zoom in on the screen and cut out the living room graphics, if you want something more practical.)

On mainstream play-by-play apps like ESPN’s Gamecast and MLB’s own Gameday, the interface is pretty basic, clearly displaying information without frills.
Ribbie prioritizes aesthetics instead, with unique pixel-art representations of every stadium and player. But it’s still simple enough to see the score of the game, as well as who’s pitching, hitting, or on base.
Because the data for all of these visualizations comes from the MLB’s API, you can find most of the information you’d be used to seeing on other apps, but it makes for a more descriptive play-by-play. Brownrout recently added support for fantasy baseball, which allows people to add their rosters and track which players are currently active in their respective games.
“I just really love the aesthetic of the miniature pixel-art stadiums,” Brownrout said. “There’s something so satisfying about it that’s hard to put a finger on. I think it’s one of the reasons people are obsessed with games like Stardew Valley. It’s an entire pixel world in the palm of your hand.”
Passion projects like Ribbie feel refreshing because they’re not trying to extract anything from us, something rare at a time when we’re so inured to being tracked everywhere online. But can projects like Ribbie last? Is it inevitable that the MLB’s lawyers will come after Ribbie because the mammoth sports organization feels threatened by a pixelized sprite of Shohei Ohtani?
These are real risks, but Brownrout thinks he’s got his bases covered (pun intended). He referenced a legal case from 2007 in which the court ruled that baseball stats are facts, and therefore are not copyrightable. This allows fantasy baseball products to exist without the MLB’s permission.
“The API is the same one that powers fantasy baseball websites, third-party stats sites, live game threads on Reddit […] So it’s historically been used for all types of official and fan-created projects,” he said. “Ultimately, the project is completely free and non-commercial, and I try to make it very clear on the website that Ribbie is an unaffiliated fan project. It’s a ‘love letter’ to baseball, not something trying to compete with MLB.tv.”
Though Brownout is pretty busy as the co-founder of AI SaaS platform Frigade, he’s still finding time to build Ribbie for the love of the game.
“I’m adding sound effects and fuller animations to make it a little easier to passively follow along with while it’s on in the background,” he said. “My neighbors must think I’m crazy, because last night I was in my bedroom doing 100 takes of ‘Ball! Strike! Out!’ on my iPhone to record for the Ribbie audio track.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
