LastPass agreed to pay $8.2 million in a class action settlement to resolve claims that it failed to prevent a 2022 data breach that compromised consumer information.
The LastPass settlement benefits consumers whose LastPass accounts were compromised as a result of the 2022 LastPass data breach.
The LastPass data breach compromised sensitive information such as password vaults, usernames, email addresses, phone numbers and more. Following the breach, consumers sued LastPass, arguing the company could have and should have prevented the breach.
LastPass is a password manager that helps consumers store and manage their passwords as well as helping consumers generate strong passwords and to protect their passwords with other security measures.
LastPass has not admitted any wrongdoing but agreed to pay $8.2 million to resolve these allegations.
Under the terms of the LastPass settlement, class members can receive both monetary and non-monetary benefits.
Class members can receive a $25 statutory payment if they had an active Consumer Premium Account, Consumer Family Account or Business Account at the time of the data breach.
Class members can also receive up to $300 for ordinary losses, such as credit monitoring, identity protection, identity restoration, dark web monitoring, security, physical or behavioral health services and more.
Class members can receive up to $10,000 for extraordinary losses, such as identity theft, fraud and other damages. Eligible class members can also receive reimbursement for up to $900,000 in cryptocurrency losses allegedly caused by the data breach.
California residents can receive an additional $100 in statutory damages under the California Consumer Privacy Act if they stored a password or security question in their LastPass vault.
All settlement benefits will be paid on a pro rata basis, meaning the amount each class member receives may be increased or decreased depending on the number of class members who make a claim.
The deadline for exclusion and objection is June 2, 2026.
The final approval hearing for the LastPass data breach settlement is scheduled for July 14, 2026.
To receive class action settlement benefits, class members must submit a valid claim form by July 2, 2026.
