1Password Issues New Payment Update Warning As Scammers Strike

{
  "signal_id": "01c009f1-4cb3-f107-e920-813eadb7fe38",
  "signal_type": "news",
  "signal_subtype": "security_incident",
  "detected_at": "2026-08-18T11:23:57+00:00",
  "company": {
    "name": "1Password",
    "domain": "1password.com"
  },
  "data": {
    "url": "https://www.forbes.com/sites/daveywinder/2026/08/18/1password-issues-new-payment-update-warning-as-scammers-strike/",
    "title": "1Password Issues New Payment Update Warning As Scammers Strike",
    "author": "Davey Winder, Senior Contributor",
    "excerpt": "By Davey Winder , Senior Contributor. An active attack campaign is targeting users of the popular 1Password password manager, with the vendor’s security team warning that emails are being distributed claiming that account payment methods need updating. There are two main takeaways from the official 1Password warning: Do not respond to these; they are bogus and not from 1Password itself, no matter how realistic they might appear. The campaign itself is speculative by nature and does not result from any breach of 1Password’s systems or servers. The attack campaign warning, posted to X by the official 1Password account on August 18, said: “Our Security team has identified an active phishing campaign targeting 1Password users. The phishing emails claim your account's payment method needs to be updated and include a link to a fake ‘update payment method’ page.” The use of payment update notifications is not a new social engineering tactic, but it has been deployed at a time when 1Password has not long ago changed its subscription rates , which could add fuel to the phishing fire by bringing urgency and believability to the table. Unlike recent attacks against users of the LastPass password manager that employed lookalike domains in order to trick people into thinking that the phishing emails in question were genuine company communications, the criminals behind the 1Password...",
    "summary": "An active phishing campaign is targeting users of 1Password, with fraudulent emails claiming that account payment methods need updating.",
    "planning": false,
    "image_url": "https://imageio.forbes.com/specials-images/imageserve/69edfccc8f76fcd98e09ad00/0x0.jpg?format=jpg&height=900&width=1600&fit=bounds",
    "confidence": 0.9,
    "published_at": "2026-08-18T11:23:57Z",
    "vulnerability": "Active phishing campaign targeting users with fake payment update emails",
    "article_sentence": "An active attack campaign is targeting users of the popular 1Password password manager, with the vendor’s security team warning that emails are being distributed claiming that account payment methods need updating."
  }
}

curl https://signals.autobound.ai/v1/signals/01c009f1-4cb3-f107-e920-813eadb7fe38 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"1password.com","limit":20}'