$8.2M LastPass data breach class action settlement

LastPass agreed to pay $8.2 million in a class action settlement to resolve claims that it failed to prevent a 2022 data breach that compromised consumer information.

The LastPass settlement benefits consumers whose LastPass accounts were compromised as a result of the 2022 LastPass data breach.

The LastPass data breach compromised sensitive information such as password vaults, usernames, email addresses, phone numbers and more. Following the breach, consumers sued LastPass, arguing the company could have and should have prevented the breach.

LastPass is a password manager that helps consumers store and manage their passwords as well as helping consumers generate strong passwords and to protect their passwords with other security measures.

LastPass has not admitted any wrongdoing but agreed to pay $8.2 million to resolve these allegations.

Under the terms of the LastPass settlement, class members can receive both monetary and non-monetary benefits.

Class members can receive a $25 statutory payment if they had an active Consumer Premium Account, Consumer Family Account or Business Account at the time of the data breach.

Class members can also receive up to $300 for ordinary losses, such as credit monitoring, identity protection, identity restoration, dark web monitoring, security, physical or behavioral health services and more.

Class members can receive up to $10,000 for extraordinary losses, such as identity theft, fraud and other damages. Eligible class members can also receive reimbursement for up to $900,000 in cryptocurrency losses allegedly caused by the data breach.

California residents can receive an additional $100 in statutory damages under the California Consumer Privacy Act if they stored a password or security question in their LastPass vault.

All settlement benefits will be paid on a pro rata basis, meaning the amount each class member receives may be increased or decreased depending on the number of class members who make a claim.

The deadline for exclusion and objection is June 2, 2026.

The final approval hearing for the LastPass data breach settlement is scheduled for July 14, 2026.

To receive class action settlement benefits, class members must submit a valid claim form by July 2, 2026.

Who’s Eligible

The class action settlement benefits all natural persons residing in the United States, as well as all companies, entities and organizations registered to do business in the United States, whose LastPass accounts were allegedly compromised, extracted, copied, stolen or otherwise exposed as a result of the 2022 LastPass data security incident and whose accounts contained data at the time of the incident.

Potential Award

A $25 statutory payment, up to $10,000 in documented losses, a $100 payout to California residents, and up to $900,000 related to crypto currency losses.

Proof of Purchase

Documentation of losses, such as receipts or bank statements, is required for all claims. “Self-prepared” documents, such as handwritten receipts, are insufficient on their own but may be considered to add clarity or support to other documentation. By submitting a claim for cryptocurrency losses, members agree to have a Special Master decide your claim and determine how much, if any, reimbursement you are entitled to receive.

Claim Form

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

07/02/2026

Case Name

In re: LastPass Data Security Incident Litigation, Case No. 1:22-cv-12047-PBS, in the U.S. District Court for the District of Massachusetts

Final Hearing

07/14/2026

Settlement Website

LastPassSettlement.com

Claims Administrator

LastPass Data Security Incident Litigation
Settlement Administrator
PO Box 2230
Portland, OR 97208-2230
[email protected]
877-748-1875

Class Counsel

Nathaniel L. Orenstein
BERMAN TABACCO

Amy Keller
DICELLO LEVITT LLP

Nicholas A. Migliaccio
MIGLIACCIO & RATHOD LLP

Thomas A. Zimmerman Jr.
ZIMMERMAN LAW OFFICES P.C.

James Pizzirusso
HAUSFELD LLP

Michael R. Reese
REESE LLP

Defense Counsel

Christopher A. Wiech
Chelsea M. Lamb
BAKER & HOSTETLER LLP