Comment by gravelc

That's quite astonishing. Have you done the same sort of check with other password managers like LastPass? Really hope this isn't widespread.