1
Published signals
currently linked to this company
Company intelligence
Nordpass cybersecurity incidents and threat signals
nordpass.com
NordPass is a password and passkey management service from Nord Security for individuals, families and organisations.
Company links
Profile sources
Company country
Lithuania
Facts last verified July 23, 2026
1
Last 28 days
recent published signals
1
Last 90 days
recent published signals
1
High or critical
confidence classifications
July 13, 2026
Latest report
most recent published signal
Company signals
All published signals involving Nordpass
macOS CrashStealer Malware Targets NordPass User Data
A new macOS information stealer, identified as 'CrashStealer,' was reported on July 13, 2026. This malware is designed to harvest sensitive data from compromised macOS systems, specifically targeting credentials from 14 password managers, including NordPass, alongside browser data, cryptocurrency wallet extensions, and keychain material. The malware utilizes a signed and Apple-notarized dropper to bypass Gatekeeper checks, and exfiltrates the collected data to an attacker-controlled server. While NordPass's own systems were not breached, user data stored in NordPass could be compromised if a user's macOS device is infected with CrashStealer.
FAQ
Questions about Nordpass cybersecurity reporting
What does the Nordpass page include?
It combines a reviewed organization profile with all current published Shadow Tier signals explicitly linked to Nordpass.
Does every mention of Nordpass appear here?
No. A signal must contain a reliable company connection and meet the publication criteria; incidental or ambiguous mentions are excluded.
Why can the incident count change?
The page follows current published reporting. Counts change as new evidence is added, classifications are reviewed, or older signals leave the reporting window.