RSA said information taken from it in a security breach in Marchhas been used to attack defense contractor Lockheed Martin.

That attack was thwarted, RSA said, but the company has nowoffered to replace millions of its SecurID tokens used primarily byits customers protecting intellectual property and corporateassets.

As for the end users at the credit unions, banks and othere-commerce sites that use RSA online security services, the companyoffered “to implement risk-based authentication strategies forconsumer-focused customers with a large, dispersed user base,typically focused on protecting Web-based financialtransactions.”

The offers came Monday from Art Coviello, executive chairman ofRSA, the Bedford, Mass.-based security arm of EMC.

“We will continue to work with all customers to assess theirunique risk profiles and user populations and help them understandwhich options may be most effective and least disruptive to theirbusiness and their users,” Coviello said in a letter published onthe company’s website.

When the attack was reported inMarch, Coviello described it as “extremely sophisticated” andtargeted at the company’s widely used two-factor authenticationservices.

It was one of a series of highly publicized attacks against various sites, includingEpsilon, Sony and Michaels. The NCUA soon after issued itsown alert to credit unions.