Hackers stole this engineer's 1Password database. Could it happen to you?

Here's the very definition of a nightmare scenario. In February 2024, Matthew Van Andel downloaded a free AI tool on the computer in his home office. Five months later, the Southern California-based engineer learned that the app included an unwelcome extra component -- an infostealing tool that gave outside attackers full access to his computer. Also: The best password managers of 2025 As Robert McMillan and Sarah Krouse reported in the Wall Street Journal, that malware was under the control of a stranger who claimed to be part of an anti-AI activist group that had targeted Van Andel's employer, the Walt Disney Company. The hacker gained access to 1Password, a password-manager that Van Andel used to store passwords and other sensitive information, as well as "session cookies," digital files stored on his computer that allowed him to access online resources including Disney's Slack channel. (If you don't have a WSJ subscription, you can read a copy of the article with no paywall at MSN.) Van Andel told the WSJ he reported the breach to Disney's cybersecurity team immediately, filed a police report, and then spent several days changing all of his passwords. To retaliate, the hackers packaged up more than a terabyte of material from Disney's internal Slack channels and published the entire cache -- 44 million messages -- online. According to Disney's cybersecurity team, the dump included "private customer information, employee passport numbers, and theme park and streaming reven...