LastPass Data Security Incident Class Action Settlement
LastPass Data Security Incident Class Action Settlement
LastPass US LP agreed to an $8,200,000 Settlement Fund, plus up to $16,250,000 in additional cash for cryptocurrency loss claims, to resolve a class action over the 2022 LastPass Data Security Incident in which an attacker copied encrypted and unencrypted backup data from LastPass's cloud storage. Eligible LastPass account holders can claim a $25 statutory payment, or up to $300 for documented ordinary losses and up to $10,000 for documented extraordinary losses. California residents can also claim $100 in CCPA statutory damages, and cryptocurrency holders may claim up to $900,000 for validated crypto losses.
Settlement fund
$8.2M
Plus up to $16.25M crypto pool
Cash with no proof
$25
Or up to $10,000 with documentation
Claim deadline
Closed
Jul 2, 2026
This settlement is closed
Sign up to get notified about similar data breach settlements the moment they open.
Do you qualify?
You may qualify if ALL of the following apply:
- You are a natural person residing in the United States, or a company, entity, or organization registered to do business in the United States
- Your LastPass account was allegedly compromised, extracted, copied, stolen, or otherwise exposed as a result of the 2022 LastPass Data Security Incident
- Your account contained data at the time of the Incident (typically those who received an email notice from LastPass about the Incident or the Settlement)
- You submit a valid Claim Form by July 2, 2026 (the $25 statutory payment requires no documentation; ordinary, extraordinary, and crypto loss claims require documentation)
- Excluded: The Court; LastPass US LP and its parent and affiliated entities, officers, and directors (including GoTo Technologies USA, LLC, LMI GP, Inc., the Francisco Partners entities, Logan Co-Invest, L.P., the Elliott entities); other Released Parties; anyone who timely opts out; and any person found criminally liable for or who pleads nolo contendere to the Incident.
Unsure whether you qualify? Contact the Settlement Administrator at info@LastPassSettlement.com or call (877) 748-1875.
What happened
Between August 2022 and November 2022, a cybercriminal conducted an attack against LastPass's systems and copied both encrypted and unencrypted backup storage data from LastPass's cloud-based storage environment. Beginning in December 2022, affected users filed class action lawsuits, which were consolidated in the U.S. District Court for the District of Massachusetts as In re LastPass Data Security Incident Litigation, Case No. 1:22-cv-12047-PBS. The Plaintiffs allege that LastPass was responsible for the Incident and that class members were injured as a result, including through subsequent fraud and cryptocurrency theft.
LastPass denies the claims and denies any wrongdoing. No court has made any judgment or determination that LastPass has any liability or did anything wrong. By entering into the Settlement, LastPass is not admitting wrongdoing. The parties agreed to settle to avoid the time, cost, and risk of trial. The Settlement provides an $8,200,000 Settlement Fund for statutory and documented loss payments, an additional Crypto Pool of up to $16,250,000 for validated cryptocurrency loss claims, a 6-month complimentary upgrade to a Consumer Premium Account for free-account users at the time of the Incident, and Dark Web Monitoring services for all current LastPass users.
How to file a claim
-
1
Confirm you are a Settlement Class Member
If you previously received an email from LastPass about the 2022 Incident or an email about this Settlement, you are presumed to be a class member. Not sure? Contact the Settlement Administrator at info@LastPassSettlement.com or call (877) 748-1875.
-
2
Choose your benefits
You can claim either (a) a $25 Statutory Payment with no documentation required, OR (b) reimbursement of up to $300 in documented Ordinary Losses and/or up to $10,000 in documented Extraordinary Losses. California residents at the time of the Incident may also claim $100 in CCPA Statutory Damages on top of the above. Free-account users at the time of the Incident can elect a 6-month complimentary upgrade to a Consumer Premium Account. If you suffered cryptocurrency losses fairly traceable to the Incident, you can also submit a separate claim for up to $900,000 from the Crypto Pool, which is decided by a court-appointed Special Master.
-
3
File online by July 2, 2026
Submit your claim online at lastpasssettlement.com/Login. Documented loss claims and crypto claims will need supporting documentation (receipts, statements, transaction records, blockchain data, etc.); self-prepared documents alone are not sufficient.
For the long-form Notice, the Settlement Agreement, and the Crypto Pool procedures (Exhibit A), visit the official settlement website: lastpasssettlement.com. Questions can be sent to the Settlement Administrator at LastPass Data Security Incident Litigation, Settlement Administrator, P.O. Box 2230, Portland, OR 97208-2230.
-
4
Receive your benefits
Cash payments are made on a pro rata basis after the Court grants Final Approval and any appeals are resolved. The Court will hold the Final Approval Hearing on July 14, 2026 at 2:30 p.m. The Crypto Pool may be the subject of an additional hearing after Final Approval, and crypto claims are individually adjudicated by the Special Master. The Consumer Premium upgrade is applied to your account automatically after final approval if you elected it; Dark Web Monitoring is provided to all current LastPass users.
Key dates
- Jun 2, 2026 Opt-out and objection deadline Upcoming
- Jul 2, 2026 Claim filing deadline Upcoming
- Jul 14, 2026 Final approval hearing (2:30 p.m., Boston, MA) Upcoming
- Benefits issued after final approval and any appeals TBD
The Final Approval Hearing will be held before the Honorable Patti B. Saris at the John Joseph Moakley U.S. Courthouse, 1 Courthouse Way, Suite 2300, Boston, MA 02210 (Courtroom 19, 7th Floor). The Court may schedule an additional hearing to approve payments from the Crypto Pool. Date and time may change; check lastpasssettlement.com for updates.
Where the money is going
All Settlement Fund and Crypto Pool benefits are paid on a pro rata basis. The Settlement also provides in-kind relief: a 6-month complimentary upgrade to a Consumer Premium Account for free-account users and Dark Web Monitoring services for all current LastPass users.
All amounts listed above are pending and subject to final court approval at the fairness hearing.
Common questions
How much money will I receive?
It depends on which benefits you claim and how many other people file. The simplest option is a $25 Statutory Payment with no documentation. In lieu of the $25 payment, you can claim up to $300 for documented ordinary losses (such as credit monitoring, identity protection, or related security costs) and up to $10,000 for documented extraordinary losses (such as identity theft or fraud) traceable to the Incident. California residents may also claim $100 in CCPA statutory damages on top of either option. Cryptocurrency claimants may claim up to $900,000 each from a separate Crypto Pool capped in aggregate at $16,250,000. All payments are pro rata and may be reduced based on the number of valid claims and approved costs.
Do I need proof?
For the $25 Statutory Payment, no documentation is required. For Ordinary Loss Relief (up to $300) and Extraordinary Loss Relief (up to $10,000), you must submit documentation such as receipts, account statements, or other records showing the losses, plus an attestation that the losses are fairly traceable to the Incident. For California residents claiming $100 CCPA statutory damages, you must attest you were a California resident at the time of the Incident and that your LastPass vault contained certain personal information. For Crypto Pool claims (up to $900,000), you must submit documentation showing your cryptocurrency losses, which the Special Master and a cryptocurrency loss expert will review.
What if I did not receive a notice?
You may still be a Settlement Class Member if your LastPass account contained data and was allegedly compromised in the 2022 Incident. To check your eligibility, contact the Settlement Administrator at info@LastPassSettlement.com or call (877) 748-1875. You can also visit lastpasssettlement.com to review the long-form Notice and Settlement Agreement.
Does staying in the class affect my right to sue LastPass later?
Yes. If you do not exclude yourself, you give up the right to sue LastPass and the other Released Parties for the claims this Settlement resolves. To preserve your right to sue, you must mail a written and signed exclusion request, postmarked by June 2, 2026, to: LastPass Data Security Incident Litigation, Settlement Administrator, P.O. Box 2230, Portland, OR 97208-2230. You cannot opt out online, by phone, or by email. If you submit a Crypto Pool claim, the Special Master's decision on your claim will be final and you will be unable to file a separate lawsuit for cryptocurrency losses caused by the Incident.
When will payments be sent out?
The Court is scheduled to hold the Final Approval Hearing on July 14, 2026 at 2:30 p.m. before Judge Patti B. Saris in Boston. Payments cannot be distributed until after Final Approval, any appeals are resolved, and the Settlement Administrator and Special Master have processed the claims. The Court may schedule another hearing after Final Approval to approve Crypto Pool payments. There is no set payout date; check lastpasssettlement.com for updates.
Dapeer Law, P.A.
Consumer class action attorneys based in South Florida. We track settlements so you don’t have to.
Similar open settlements
A note on our role
Dapeer Law, P.A. did not act as lead counsel or otherwise participate in litigating the above class action and provides this information to remind class members of the deadline to submit a claim for a share of the settlement.
This page is for informational purposes only and does not constitute legal advice. Dapeer Law, P.A. is not the administrator of this settlement and is not affiliated with LastPass US LP or Epiq Class Action & Claims Solutions (the Settlement Administrator). For official information, visit lastpasssettlement.com or call (877) 748-1875. Settlement Class Counsel are Nathaniel L. Orenstein of Berman Tabacco; Amy Keller of DiCello Levitt LLP; Nicholas A. Migliaccio of Migliaccio & Rathod LLP; Thomas A. Zimmerman, Jr. of Zimmerman Law Offices, P.C.; James Pizzirusso of Hausfeld LLP; and Michael R. Reese of Reese LLP (on behalf of the California subclass). The Class Representatives are Amy Doermann, Ayana Looney, Dan LeFebvre, David Andrew, Erik Brook, Glenn Mulvenna, Hui Li, Nathan Goldstein, Noah Bunag, R. Andre Klein, Sarb Dhesi, Steven Carter, Debt Cleanse Group Legal Services LLC, and Hustle N Flow Ventures LLC. This website is attorney advertising. Past results do not guarantee future outcomes.
Check out Open Class Action Investigations
