LastPass Data Security Incident Settlement
$25–$10,000
This settlement is closed to new claims — the deadline was July 2, 2026. You can still see what it was about and follow the case in court below. Looking for money you can still claim? Browse open settlements →
What happened
LastPass experienced a data security incident between August 2022 and November 2022 that impacted individuals with LastPass accounts. The company has agreed to settle claims arising from this incident and provide cash and in-kind benefits to affected users.
Do you qualify?
Anyone who received an email notice from LastPass about the 2022 data security incident or received notice about this proposed settlement is included as a Settlement Class Member and may be eligible for benefits. This includes individuals with LastPass accounts affected by the incident between August 2022 and November 2022.
How to file
Submit a Claim Form by July 2, 2026 at https://www.lastpasssettlement.com/submit-a-claim. Depending on the benefit type sought, you may need to provide documentation of ordinary losses (up to $300), extraordinary losses (up to $10,000), or validated cryptocurrency losses. An independent third party will review claims and determine eligibility; the decision is final.
Common questions
- How much does the LastPass Data Security Incident Settlement pay?
- Estimated payout: $25–$10,000. The total settlement fund is $8.2M. Actual amounts depend on how many valid claims are filed — most settlements divide a fixed fund pro rata, so a higher claim rate means a smaller individual check. An "up to" figure is a cap, not a guarantee.
- What is the claim deadline for the LastPass Data Security Incident Settlement?
- This settlement is closed to new claims — the deadline was July 2, 2026. Once a claim deadline passes you generally forfeit your share, even if you qualified.
- Do I need proof of purchase for the LastPass Data Security Incident Settlement?
- Yes. This settlement asks for documentation supporting your claim — a receipt, an account record, or the notice you were sent. Check the official settlement website for exactly which documents are accepted.
- Is the LastPass Data Security Incident Settlement notice real, or a scam?
- Epiq is the settlement administrator for this case. Claims are filed at lastpasssettlement.com. Filing a class action claim is always free — no legitimate settlement charges you to claim, and no administrator will ask for payment, a gift card, or your full Social Security number by email or text. If a notice asks for any of those, it is not from the administrator. When in doubt, ignore the link you were sent and go to the official settlement website directly.
- When will payments from the LastPass Data Security Incident Settlement be sent?
- Class action payouts typically take 12 to 24 months after the claim deadline, and longer if the settlement is appealed. The final approval hearing for this case is set for July 14, 2026; no payments can be issued before a settlement receives final approval.
In the news
- Up To $10,000 Per Person Heading to Victims of Massive Cybersecurity Attack on Tech FirmThe Daily Hodl · April 3, 2026
- Canadians can get up to $500 from new multimillion-dollar settlementDaily Hive · March 26, 2026
Headlines via NewsAPI. ClaimWatch isn't affiliated with these publications.
New to class actions?
This summary was generated from public settlement documents and may contain errors. Confirm eligibility, deadlines, and payment terms on the official settlement website before filing. ClaimWatch is not a law firm and this is not legal advice. Filing a claim is free.
More privacy settlements
View all →Call-On-Doc Pixel Settlement
Call-On-Doc used third-party tracking technologies called "tracking pixels" on its web pages. Plaintiffs alleged this use violated certain California laws. Call-On-Doc denies wrongdoing, and the parties agreed to settle to avoid litigation costs and uncertainty.
FitOn VPPA Settlement
FitOn allegedly disclosed its subscribers' personally identifiable information to third parties without consent and in violation of the Video Privacy Protection Act (VPPA). The defendant denies it violated any law.
Up to $10
Serviceaide Data Breach Settlement
Serviceaide, Inc. experienced unauthorized access to its computer systems and network between September 19, 2024, and November 5, 2024, which exposed the private information of current and former patients of Catholic Health. The lawsuit alleges negligence, breach of implied contract, unjust enrichment, and invasion of privacy. The defendant denies all wrongdoing.
Okanogan Behavioral Healthcare Data Breach Settlement
Okanogan Behavioral Healthcare (OBHC) experienced an unauthorized data incident discovered in May 2024 that exposed sensitive patient information including names, addresses, dates of birth, Social Security numbers, driver's license numbers, identification numbers, and medical and health insurance information. OBHC denies any wrongdoing.
$50–$5,350