LastPass data breach settlement
In re LastPass Data Security Incident Litigation
Also known as LastPass hack; LastPass settlement; GoTo
The lawsuit claimed LastPass was responsible for a 2022 attack that copied backup data from its cloud storage.
Copied from the official notice. Last compared Nov 4, 2026.
- You could get
- $25 (paid accts), shared among everyone who files Up to $10,000 for losses you can show with paperwork.
Source
“$25 or up to $10,000 for losses (paid accounts); pro rata”
From the administrator site: Official settlement site home page (read through the local scraper). Last compared Nov 4, 2026.
- Payments
- Approved, not paid yet Court approved Sep 30, 2026. Has it paid yet? See payment status.
Source
“The Court granted Final Approval of the Settlement on September 30, 2026. Additional information and updates regarding the administration of the Settlement will be posted on this website as they become available.”
From the administrator site: Official settlement site home page (read through the local scraper). Last compared Nov 4, 2026.
- Claims
- Closed Jul 2, 2026
Source
“July 2, 2026** Deadline to Submit a Claim Form”
From the administrator site: Official settlement site home page (read through the local scraper). Last compared Nov 4, 2026.
- Who can file
- LastPass user whose account was exposed in the 2022 incident
Source
“(1) Defendant, GoTo Technologies USA, LLC, Francisco Partners Management, L.P., Francisco Partners Consulting, LLC, Elliott Investment Management L.P., and their officers and directors; (2) all Persons who submit an Opt-Out from the Settlement; (3) the Court; and (4) any Person found by a court of competent jurisdiction to be guilty under criminal law of initiating, causing, aiding or abetting the criminal activity occurrence of the Incident, or who pleads nolo contendere to any such charge.”
From the court record: Final Approval Order and Judgment, D. Mass. 1:22-cv-12047-PBS (stamped 9/30/26; copy on the settlement site, read through the local scraper). Last compared Nov 4, 2026.
- Where
- Anywhere in the U.S.
Source
“the Settlement Class is defined as all natural persons residing in the United States, as well as all companies, entities, and organizations registered to do business in the United States, whose LastPass accounts were allegedly compromised, extracted, copied, stolen, or otherwise exposed as a result of the 2022 LastPass Data Security Incident, and whose accounts contained data at the time of the Incident.”
From the administrator site: Official FAQ (read through the local scraper). Last compared Nov 4, 2026.
Quick answers
How much is the LastPass data breach settlement payout?
$25 (paid accts), shared among everyone who files. Up to $10,000 for losses you can show with paperwork.
Can I still file a claim for the LastPass data breach settlement?
No. Claims closed on Jul 2, 2026.
When is the LastPass data breach settlement payout date?
Court approved Sep 30, 2026.
Is the LastPass data breach settlement legit?
The settlement administrator (the company that handles claims) is Epiq, and the official site is www.lastpasssettlement.com. Real notices point there; if a link in a message goes anywhere else, do not use it.
The official site never asks you to pay to file.
Also ending this week
Related settlements
Confirm with the administrator before you act.
Case details
- Case
- In re LastPass Data Security Incident Litigation
- Court
- U.S. District Court, District of Massachusetts
- Case number
- 1:22-cv-12047-PBS
- Administrator
- Epiq
- Official site
- www.lastpasssettlement.com
- Settlement fund
- $8,200,000 settlement fund, plus a Crypto Pool capped at $16,250,000
- Full payout terms
- $25 or up to $10,000 for losses (paid accounts); pro rataSettlement fund (paid pro rata): for Premium, Family or Business accounts with vault content, a $25 statutory payment, or instead reimbursement of documented ordinary losses up to $300 and extraordinary losses up to $10,000; plus $100 CCPA payment for eligible California residents with any account type. Crypto Pool: up to $900,000 per claimant for validated cryptocurrency losses, aggregate cap $16,250,000, paid pro rata. In-kind: 6-month Premium upgrade for free-account users and dark web monitoring.
- Effort
- Easy, about 4 minutes
Other dates
- Opt-out (exclusion) deadline
- (passed) source document
- Objection deadline
- (passed) source document
- Final approval hearing
- (passed) source document
- Final approval granted
- From the court order we read.Final Approval Order and Judgment stamped 9/30/26, read on the settlement site; the site says the court granted final approval on September 30, 2026. Source: court record
The court’s exact words
all natural persons residing in the United States, as well as all companies, entities, and organizations registered to do business in the United States, whose LastPass accounts were allegedly compromised, extracted, copied, stolen, or otherwise exposed as a result of the 2022 LastPass Data Security Incident, and whose accounts contained data at the time of the Incident.
Quoted from the official notice. Read the notice for the full definition.
Our notes: The 2022 LastPass Data Security Incident occurred between August 2022 and November 2022. The $25 statutory payment and loss reimbursements are for members with an active Consumer Premium, Consumer Family or Business Account and vault content; the CCPA payment is for natural persons who were California residents at the time and had any LastPass account. Excluded are the Court, LastPass and listed related companies, their officers and directors, opt-outs, and anyone found guilty of the attack.
You may be included if you live in the U.S. or are a U.S.-registered business and your LastPass account held data when exposed in 2022.
You are not included if you opted out, are an officer or director of LastPass or a related defendant, or are the judge.
You are not included if you were found guilty of (or pleaded no contest to) a crime in causing the incident.
Sources and checks (3)
Every fact people act on was copied from the official source and compared with it. How we check
- Official settlement site home page (read through the local scraper) administrator site
- Official FAQ (read through the local scraper) administrator site
- Final Approval Order and Judgment, D. Mass. 1:22-cv-12047-PBS (stamped 9/30/26; copy on the settlement site, read through the local scraper) court record
What changedLast change Nov 4, 2026
- Corrected what you need for the California payment (the exact items to attest to) per the official FAQ. source document
- Corrected who may be included (people found guilty of causing the incident) per the official FAQ and final approval order. source document
- Corrected what you need for the California payment (both attestations) per the official FAQ. source document
- Corrected the payout (the $25 and loss payments are for paid accounts only; the California payment is open to any account) per the official FAQ. source document
- Corrected who may be included (opt-outs and defendant officers and directors) per the official FAQ. source document
- Payment-status page created. The court granted final approval on September 30, 2026, and the administrator's site says only that updates on administering the settlement will be posted as they become available; no payment date is given. source document
Questions
I already filed. What now?
If your claim was filed on time and accepted, it is in the pool. The administrator pays, usually after final approval and any appeals. Contact the administrator with your claim ID if something looks wrong. Never pay anyone to check on a claim.