If you were a LastPass user affected by major security breaches in 2022, you might be eligible for a cash payout—possibly a really big one. The company is paying out benefits to those affected by breaches that compromised user vaults, and some people could be getting five-figure payments..
What happened with the LastPass data breach?
In 2022, LastPass experienced two major cybersecurity incidents, in which threat actors gained access to users' password vaults containing both encrypted and unencrypted data—including usernames, passwords, secure notes, form-filled data, and website URLs. Security researchers later discovered that hackers were able to crack some users' master passwords and steal millions in cryptocurrency.
Consumers subsequently sued LastPass, and the company eventually agreed to an $8.2 million settlement late last year.
Am I eligible for a payment from the LastPass data breach?
If you are a U.S. resident who had a LastPass account with data in it at the time of the breach, you are likely included in the settlement class. You may have received either an email about the 2022 incident or a notice of the settlement. Class members qualify for settlement benefits based on their account tier and the losses they can claim.
How much can I get from the LastPass settlement?
Anyone who had a premium, family, or business account with LastPass when the breach occurred can claim a $25 payout. (Users who were on the free tier are eligible only for a 6-month premium subscription upgrade.) If you were a California resident, you can claim an additional $100, regardless of which type of account you held.
Users who experienced documented losses related to the breach are eligible for additional benefits. These include up to $300 in compensation for credit monitoring, identity protection, identity restoration, dark web monitoring, security, physical or behavioral health services, and up to $10,000 to cover costs related to identity theft and fraud. Cryptocurrency losses may also be reimbursed, up to $90,000 per individual claimant.
What do you think so far?
Finally, LastPass is automatically adding dark web monitoring services for users affected by the breach who still hold active accounts.
What do I need to do to get my LastPass settlement payout?
To receive a payment, eligible users must submit a claim by 11:59 p.m. ET on July 2, 2026. Claims can be filed online via the settlement portal. You will need to provide the unique ID and PIN from your settlement notice and confirm some information about your LastPass account. If you are claiming additional benefits for losses, you will also need to upload supporting documentation, such as receipts, invoices, bank statements, or copies of communication.
If you believe you are part of the settlement class but didn't receive (or can't find) your notice, you can call the administrator at 1-877-748-1875. Final approval for the settlement is expected on July 14, 2026, and it may take additional time to process and pay claims.
