Home / Business and Economy / LastPass Users Await $25M Data Breach Payout
LastPass Users Await $25M Data Breach Payout
1 Apr
Summary
- A proposed $25 million settlement addresses a 2022 data breach.
- Users may receive Dark Web monitoring and cash payouts.
- Claims deadline is July 2, 2026, with opt-outs by June 2, 2026.
A proposed settlement of almost $25 million has been reached by LastPass concerning a major data breach that occurred between August and November 2022. During this period, attackers accessed LastPass backup servers, leading to the theft of encrypted and unencrypted data, with some users reporting subsequent cryptocurrency losses.
LastPass, while denying any wrongdoing, agreed to the settlement to avoid protracted litigation. The terms offer tiered benefits: all users receive Dark Web monitoring, while free users get six months of premium service. A $8.2 million fund provides cash payouts, starting at $25, with options for documented ordinary losses up to $300 and extraordinary losses up to $10,000.
A separate $16.25 million fund is designated for users who suffered cryptocurrency losses, potentially offering up to $900,000 per claimant. California residents are eligible for an additional $100 payment. Affected users are being notified via email and must file claims by July 2, 2026. The opt-out and objection deadline is June 2, 2026, with a final approval hearing scheduled for July 14, 2026.
