Intruders compromised a software developer's endpoint device to gain unauthorized access to LastPass's cloud-hosted development environment. The threat actors exfiltrated segments of proprietary source code and technical documentation, initiating a deeper multi-stage corporate breach.