$8.2M LastPass Data Breach Settlement

U.S.-based individuals or businesses whose LastPass accounts contained data and were allegedly compromised in the 2022 breach may be eligible, with documentation required for loss claims and additional payments possible for certain California residents.

About This Settlement

LastPass allegedly failed to prevent a 2022 data breach that exposed sensitive consumer information, including password vaults, usernames, email addresses, and phone numbers. Consumers sued, arguing that LastPass could have and should have taken steps to prevent the breach. LastPass has agreed to pay $8.2 million to resolve these alleged claims, without admitting any wrongdoing.

Who Qualifies

• You are a natural person residing in the United States, OR a company, entity, or organization registered to do business in the United States
• Your LastPass account was allegedly compromised, extracted, copied, stolen, or otherwise exposed as a result of the 2022 LastPass data security incident
• Your account contained data at the time of the incident
• Documentation of losses (such as receipts or bank statements) is required to support claims for ordinary or extraordinary losses
• California residents who stored a password or security question in their LastPass vault may qualify for an additional payment

What You May Receive

Eligible claimants may receive the following, depending on their circumstances and the documentation they provide: a $25 statutory payment available to all qualifying claimants; up to $300 for documented ordinary losses; up to $10,000 for documented extraordinary losses; up to $900,000 for losses related to cryptocurrency; and an estimated additional $100 for California residents who stored a password or security question in their LastPass vault. Actual payout amounts may vary based on the total number of valid claims submitted and available settlement funds. Individual payments are not guaranteed.

How to File a Claim

1. Visit the official settlement website at LastPassSettlement.com to access the claim form and review full eligibility requirements.
2. Complete the claim form accurately, providing all required personal information and details about how your LastPass account was affected by the 2022 data breach.
3. Gather and submit supporting documentation for any loss-based claims, such as receipts, bank statements, or other records that verify your out-of-pocket expenses related to the breach.
4. Submit your completed claim form and all supporting documentation by the claim deadline of July 2, 2026. Late submissions may not be accepted.