@patrickyoung 我确实没有上 Twitter 看，因为我没有在用了，所以没有特别关注。LastPass 的公告里说 Security Notes 是加密的
The threat actor was also able to copy a backup of customer vault data from the encrypted storage container which is stored in a proprietary binary format that contains both unencrypted data, such as website URLs, as well as fully-encrypted sensitive fields such as website usernames and passwords, secure notes, and form-filled data.

刚刚上 Twitter 看了一下，找到的也是说 Secure Notes 是加密的，你看到的推文能指路个链接么？
URL 这个确实是问题，URL 也可能包含敏感信息。