If you had a LastPass account during the 2022 security incident, you may be eligible for cash payments and benefits from a $24.45 million class action settlement. This case covers users whose account data may have been exposed between August 2022 and November 2022.
What happened?
This class action, In re: LastPass Data Security Incident Litigation alleges that LastPass US LP failed to adequately protect user data during a cyber incident in 2022. According to the lawsuit, the breach may have exposed both encrypted and unencrypted backup vault data.
Who is eligible?
You may be included in the settlement if you:
- Had a LastPass account at any time between August–November 2022, and
- Received an email notice from LastPass about the incident or settlement, and
- Your account data was allegedly impacted by the security incident
Eligible accounts include:
- Consumer Free accounts
- Consumer Premium accounts
- Consumer Family accounts
- Business accounts and organizations (U.S.-based)
If you got the notice, you’re very likely included, but you still must file a claim to receive anything.
How much money can you get?
Payments vary depending on your account type and losses. All cash benefits are subject to pro rata adjustment, meaning payouts may increase or decrease based on total claims.
Available benefits include:
- $25 statutory payment (eligible users with impacted accounts)
- Up to $300 for documented ordinary losses
- Up to $10,000 for documented extraordinary losses
- $100 (California residents only) under CCPA
- Crypto-related losses: up to $900,000 per claimant (subject to special review process)
Additional non-cash benefits:
- 6-month upgrade to LastPass Consumer Premium (for eligible free users)
- Dark web monitoring services (for all class members)
Your options
| Option | What it means | What you get | Deadline impact |
|---|---|---|---|
| Submit a Claim | File for benefits | Cash + services (if approved) | Must file by July 2, 2026 |
| Exclude Yourself | Opt out of settlement | Nothing from this case | Keep right to sue separately |
| Object | Tell the court you disagree | Still may get benefits if you file claim | Must file by June 2, 2026 |
| Do Nothing | Take no action | No payment or benefits | You give up your rights |
How to file a claim?
To get paid or receive benefits, you must submit a claim form online or by mail.
What you’ll need:
- Unique ID and PIN from your notice email
- Basic account and contact information
- Supporting documents (only if claiming losses)
Steps to submit:
- Go to the official settlement website
- Enter your Unique ID and PIN
- Select your benefit type
- Upload documentation (if required)
- Submit your claim before the deadline
Mailing option:
LastPass Data Security Incident Litigation Settlement Administrator
P.O. Box 2230
Portland, OR 97208-2230
If you had a LastPass account during the 2022 incident and received notice, this settlement may cover you. But you must submit a claim by July 2, 2026 to receive any payment or benefits.
You can also submit a claim form online.
