LastPass Data Breach Settlement -- $25 Cash, Up to $10,000 for Losses, Up to $900,000 for Stolen Crypto

LastPass Data Breach Settlement -- $25 Cash, Up to $10,000 for Losses, Up to $900,000 for Stolen Crypto

By Steve Levine

LastPass Data Breach Class Action Settlement 2022 Hack Crypto Stolen Vault Compromised $25 Cash $10000 Losses $900000 Crypto 2026

Published: March 25, 2026

Claim Deadline: July 2, 2026

Settlement Fund: $8,200,000 + $16,250,000 Crypto Pool

Proof Required: No for $25 payment / Yes for higher amounts


What Is This Settlement About?

Between August and November 2022, a cybercriminal attacked LastPass's systems and copied both encrypted and unencrypted backup data from the company's cloud storage. If you used LastPass as your password manager, your vault data -- including encrypted passwords and unencrypted metadata like website URLs -- was potentially exposed. For users who lost cryptocurrency as a result, the consequences were devastating.

A consolidated class action was filed, and LastPass agreed to settle for a combined total of $24.45 million: an $8.2 million general settlement fund for all class members, plus a separate $16.25 million Crypto Pool specifically for people who lost cryptocurrency. LastPass denied all claims and says it did nothing wrong. The court has not determined liability. Both sides agreed to settle.

Who Qualifies?

You qualify if you had a LastPass account that was compromised, extracted, copied, stolen, or otherwise exposed as a result of the 2022 breach, and your account contained data at the time. If you received an email from LastPass about the breach or about this settlement, you are a class member.

Both individuals and businesses with LastPass accounts are included.

How Much Can You Get?

This settlement has multiple layers of benefits. Here is what is available.

$25 Statutory Payment: Every class member with a paid account (Consumer Premium, Consumer Family, or Business) and vault content can claim $25 cash. No documentation required.

OR instead of the $25, you can claim higher amounts with documentation:

Up to $300 for Ordinary Losses: Reimbursement for costs like credit monitoring, identity protection services, or similar expenses that are "fairly traceable" to the breach. You need receipts or documentation (not self-prepared handwritten notes).

Up to $10,000 for Extraordinary Losses: Reimbursement for identity theft, fraud, or similar losses that were "caused by" the breach. You need documentation proving the loss and an attestation connecting it to the LastPass breach.

You choose the $25 OR the documented losses -- you cannot get both. But you can get the documented losses AND the California bonus AND the crypto reimbursement if applicable.

$100 Extra for California Residents

If you were a California resident at the time of the breach and you had any type of LastPass account (free or paid), you can claim an additional $100 in CCPA statutory damages. This is on top of whatever other benefit you claim. You must attest that you lived in California at the time and that you stored qualifying personal information in your vault -- such as passwords, Social Security numbers, driver's license numbers, financial account numbers, or biometric data.

Up to $900,000 for Stolen Cryptocurrency

This is the part that makes this settlement unusual. If you stored crypto wallet keys, seed phrases, or other cryptocurrency access information in your LastPass vault and your crypto was stolen after the breach, you can claim up to $900,000 per person from a separate $16.25 million Crypto Pool.

Crypto claims are reviewed by a court-appointed special master (Bruce A. Friedman, Esq.) and a blockchain forensics expert -- not the regular settlement administrator. You will need to submit documentation, and the special master will determine what you are owed. The special master's decision is final.

By submitting a crypto claim, you agree to be bound by the special master's decision and give up your right to file a separate lawsuit against LastPass for crypto losses. This is an important tradeoff to understand before filing.

All valid crypto claims are paid pro rata from the Crypto Pool after administration costs, special master fees, expert costs, and class counsel's apportioned fees are deducted.

Free Benefits for Everyone (No Claim Form Needed)

All class members who currently have a LastPass account will automatically receive Dark Web Monitoring services, which alert you if your personal data appears on dark web sites or in data leaks. No claim form is needed for this benefit.

If you were a free (Consumer Free) LastPass user at the time of the breach, you can also claim a complimentary 6-month upgrade to a Consumer Premium account. Check the box on the claim form. At the end of the 6 months, your account reverts to free unless you choose to keep premium at regular pricing. No credit card is required for the upgrade.

How Do I File a Claim?

Submit your claim form online at LastPassSettlement.com. The deadline is July 2, 2026.

If you are claiming documented losses, include your supporting documentation with your claim. Self-prepared handwritten receipts alone are not sufficient, but they can be included to support other evidence.

An independent third party will review all claims and determine what benefits you are eligible for. Their decision is final.

Important Dates


Claim Deadline: July 2, 2026

Opt-Out Deadline: June 2, 2026

Objection Deadline: June 2, 2026

Final Fairness Hearing: July 14, 2026 at 2:30 PM, John Joseph Moakley U.S. Courthouse, 1 Courthouse Way, Suite 2300, Courtroom 19 (7th Floor), Boston, MA 02210, before Hon. Patti B. Saris

Settlement Notice PDF

Download the Full Settlement Notice (PDF)

Case Information


Case: In re: LastPass Data Security Incident Litigation, Case No. 1:22-cv-12047-PBS
Court: U.S. District Court, District of Massachusetts
Judge: Hon. Patti B. Saris
Defendant: LastPass US LP
Breach Period: August 2022 through November 2022
Settlement Fund: $8,200,000
Crypto Pool: $16,250,000 (up to $900,000 per person)
Combined Total: $24,450,000
$25 Statutory Payment: No proof required (paid accounts with vault content)
Ordinary Losses: Up to $300 with documentation
Extraordinary Losses: Up to $10,000 with documentation
California CCPA: $100 additional for CA residents
Crypto Claims: Up to $900,000 per person (special master review)
Dark Web Monitoring: Free for all current LastPass users (automatic)
Premium Upgrade: 6 months free for former free-tier users
Claim Deadline: July 2, 2026
Opt-Out / Objection Deadline: June 2, 2026
Final Hearing: July 14, 2026 at 2:30 PM (Boston, MA)
Attorney Fees: Up to 35% of each fund
Special Master (Crypto): Bruce A. Friedman, Esq.
Class Counsel: Berman Tabacco, DiCello Levitt LLP, Migliaccio & Rathod LLP, Zimmerman Law Offices P.C., Hausfeld LLP, Reese LLP (CA subclass)
Settlement Website: LastPassSettlement.com

How Do I Find Class Action Settlements?

Find all the latest class actions you can qualify for by getting notified of new lawsuits as soon as they are open to claims:


Claim Form Website: LastPassSettlement.com


File Your Claim -- Deadline July 2, 2026


Filing Class Action Settlement Claims

Please note that your claim form will be rejected if you submit a settlement claim for payout with any fraudulent information. By providing this information and your sworn statement of its veracity, you agree to do so under the penalty of perjury. You would also be harming others that actually qualify for the class action settlement. If you are not sure whether or not you qualify for this class action settlement, visit the class action administrator's website at LastPassSettlement.com. OpenClassActions.com is a consumer advocacy and class action news site, and is not a class action administrator or a law firm.
For more class actions keep scrolling below.


LastPass Data Breach Settlement Summary
Status Open -- Accepting Claims
Combined Fund $24.45M ($8.2M fund + $16.25M crypto)
$25 Cash No proof (paid accounts w/ vault content)
Documented Losses Up to $300 ordinary / $10,000 extraordinary
California CCPA $100 additional
Crypto Losses Up to $900,000 per person
Claim Deadline July 2, 2026
Hearing July 14, 2026 at 2:30 PM (Boston, MA)
Website Last Pass Settlement