LastPass Data Breach Class Action Settlement
U.S. residents and businesses with LastPass accounts compromised in the 2022 data security incident whose accounts contained data at the time.
Settlement Closed
Who’s Eligible
You may be eligible for the LastPass settlement if you:
- Had a LastPass account that was compromised, extracted, copied, stolen, or otherwise exposed as a result of the 2022 LastPass Data Security Incident (August–November 2022)
- Had data stored in your LastPass account at the time of the Incident
- Previously received an email notice from LastPass about the Incident or Settlement
- Are a natural person residing in the United States, or a company, entity, or organization registered to do business in the United States
Eligible States
Claim Deadline
What You Need to Do to Get Paid
To get paid from the LastPass settlement:
Claim Online
- Visit the official settlement claim site to access the online Claim Form.
- Complete the form, selecting the benefit type you’re claiming: the $25 statutory payment, ordinary loss reimbursement (up to $300), extraordinary loss reimbursement (up to $10,000), the $100 CCPA payment (California residents only), the 6-month Premium Account upgrade (free account users), or cryptocurrency loss reimbursement (up to $900,000).
- For loss reimbursement claims, gather and upload supporting documentation such as receipts or records — self-prepared documents like handwritten receipts are not sufficient on their own.
- Submit your completed Claim Form by the deadline of July 2, 2026.
For Ordinary Loss Relief and Extraordinary Loss Relief, claimants must submit documentation and attestation supporting claims, including receipts or non-self-prepared documentation. Self-prepared documents alone are insufficient. For Statutory Payment ($25) or CCPA Statutory Damages ($100), attestation only is required with no documentation needed.
Settlement Payout
LastPass settlement payments are variable depending on the type of claim you submit. The baseline option is a flat $25 statutory payment for eligible account holders. Alternatively, you can claim up to $300 for documented ordinary losses (such as credit monitoring costs) or up to $10,000 for documented extraordinary losses like identity theft or fraud. California residents may also claim an additional $100 under the CCPA. Users who lost cryptocurrency allegedly due to the breach can seek reimbursement up to $900,000 per claimant, drawn from a separate $16,250,000 pool. All cash payments from the settlement fund are paid on a pro rata basis, meaning the final amounts may adjust based on how many valid claims are filed. Payments won’t be distributed until after the Final Approval Hearing on July 14, 2026, and any appeals are resolved.
- $25 statutory payment
- Up to $300 per claimant for documented ordinary losses
- Up to $10,000 per claimant for documented extraordinary losses
- $100 CCPA statutory damages for eligible California residents
- Up to $900,000 per claimant for cryptocurrency losses (subject to $16,250,000 aggregate cap)
- Settlement Administration Costs
- Court-approved attorneys’ fees and expenses
- Service Awards for Class Representatives
Background of the Lawsuit
Between August and November 2022, a cybercriminal attacked LastPass’s systems and copied both encrypted and unencrypted backup data from the company’s cloud-based storage environment. The breach affected users whose LastPass account data was compromised or exposed during that period.
Starting in December 2022, affected users filed multiple class action lawsuits against LastPass US LP, alleging the company was responsible for the incident and that users suffered harm as a result. Those cases were consolidated in the U.S. District Court for the District of Massachusetts as In re LastPass Data Security Incident Litigation, Case No. 1:22-cv-12047-PBS.
LastPass denies any wrongdoing. No court has determined that the company bears liability. Both sides agreed to settle to avoid the cost and uncertainty of trial, resulting in an $8,200,000 settlement fund plus a separate $16,250,000 pool for cryptocurrency loss claims. For more information, visit the official settlement website.
Frequently Asked Questions
Who qualifies for the LastPass data breach settlement?
How much can I get from the LastPass settlement?
What is the deadline to file a claim in the LastPass settlement?
How do I file a claim for the LastPass data breach settlement?
What documentation do I need to submit a loss claim?
Does the LastPass settlement cover cryptocurrency losses?
When will LastPass settlement payments be sent out?
What happens if I do nothing in the LastPass settlement?
Settlement Administrator
LastPass Data Security Incident Litigation Settlement Administrator, c/o Settlement Administrator, P.O. Box 2230, Portland OR 97208-2230
Case Details
Listing Information
There are no similar listings
No news articles related to this settlement yet
Discussion
Disclaimer
The information on this website is free to access and provided for general educational and informational purposes only. It is not legal advice. We summarise settlement information from official notices, court documents, settlement websites, administrators, and other primary sources where available.
Settlement details and deadlines may change. Always refer to the official settlement website or consult a licensed attorney for advice specific to your situation.
Every listing is reviewed by our research team. Found an error? Let us know. Learn more about how we verify our information.