Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.
LastPass data breach class action overview:
- Who: A Chicago company is suing password management company LastPass.
- Why: The company said it uses LastPass to manage its passwords, and that LastPass was negligent in its data security, allowing hackers to access its system.
- Where: The LastPass data breach class action was filed in a Massachusetts federal court.
Password management company LastPass has been hit with a class action lawsuit after experiencing two data breaches in the past three months.
Plaintiff Debt Cleanse Group Legal Services LLC filed the class action complaint against LastPass US LP on Dec. 2 in a Massachusetts federal court, alleging negligence and breach of contract.
The Chicago-based debt relief firm said it used LastPass to manage its passwords. However, it says LastPass was negligent in its duties, evidenced by the fact it has experienced two data breaches in the past three months.
In August, LastPass announced it had been hacked, with portions of source code and technical information stolen in the data breach.
On Nov. 30, LastPass CEO Karim Toubba issued another statement, announcing the company had experienced another security incident.
“We have determined that an unauthorized party, using information obtained in the August 2022 incident, was able to gain access to certain elements of our customers’ information,” LastPass said.
LastPass was negligent with data security, class action lawsuit states
The LastPass data breach lawsuit states that LastPass used ineffective data security measures to protect its customers’ information.
“There is a strong probability that entire batches of stolen information have been dumped on the black market, or are yet to be dumped on the black market, meaning plaintiff and class members may be at an increased risk of fraud and identity theft for many years into the future,” the lawsuit states.
DebtCleanse responded to news of the breach by changing all of its employees’ passwords for accounts that used LastPass, which took considerable resources, it says.
It seeks to represent all LastPass users whose information was accessed in the breach. It seeks certification of the class action, damages, fees, costs and a jury trial.
What do you think of the allegations against LastPass? Let us know in the comments.
Debt Cleanse is represented by Kenneth D. Quat of Quat Law Offices, Thomas A. Zimmerman Jr. of Zimmerman Law Office PC, and Marc E. Dann and Brian D. Flick of DannLaw.
The LastPass data breach class action lawsuit is Debt Cleanse Group Legal Services LLC, et al. v. GoTo Technologies USA Inc., Case No. 1:22-cv-12047, in the U.S. District Court for the District of Massachusetts.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
- Conway Regional Medical Center data breach $295K class action settlement
- Meta class action claims tax filing services transmit sensitive financial information to platform
- ESPN seeks arbitration in lawsuit alleging it illegally shares data with Meta
- Cavender’s class action claims retailer failed to protect employee data prior to breach
4 thoughts onLastPass class action claims data breach result of faulty security
I am using Lastpass for my business and due to the nature of my business I have hundreds different accounts. In trying to minimize the risk and impact of that breach to my business I changed allot of my accounts, which costed me several days. That are days that I cannot work for my customers and thus have a loss of income witch needs to by refunded by Lastpass as they are clearly responsible for this! After all I am paying for there service with only 1 reason: that my passwords are safe!
How do you join the law suit?
I have been using last pass for my cryptocurrency I am a victim of lastpass’s most recent hack. I have been robbed of thousands and thousands of dollars. I want my money back. How do I be part of the class action lawsuit?
I have been using LastPass for several years and I am disturbed that LastPass never reached out to me warning me that my data may have been accessed in the breach. I used LastPass mostly for personal use but stored work-related login credentials as well.