Short answer: on November 3, 2026, mSeven Software, the maker of mSecure, emailed current and former customers about "suspicious activity" and told them to secure everything stored in the app. Customers also report support replies saying an encrypted database was taken from mSecure Cloud, with no evidence so far that its contents were accessed. The cause, dates and number of affected users have not been published. If you used mSecure, do not wait for those details: replace the credentials that were inside your vault, starting with email and financial accounts, and do it on each service's own site.

This is a developing story. Everything below reflects reporting available on November 5, 2026. mSecure was not tested, and the reportedly stolen data was not seen. Check the sources at the end for updates.

What mSeven has confirmed

Coverage quotes the notice ( BleepingComputer , Malwarebytes ). The email went out on November 3.…