LastPass Data Breach Settlement -- $25 Cash, Up to $10,000 for Losses, Up to $900,000 for Stolen Crypto
By Steve Levine
Published: March 25, 2026
Claim Deadline: July 2, 2026
Settlement Fund: $8,200,000 + $16,250,000 Crypto Pool
Proof Required: No for $25 payment / Yes for higher amounts
Between August and November 2022, a cybercriminal attacked LastPass's systems and copied both encrypted and unencrypted backup data from the company's cloud storage. If you used LastPass as your password manager, your vault data -- including encrypted passwords and unencrypted metadata like website URLs -- was potentially exposed. For users who lost cryptocurrency as a result, the consequences were devastating.
A consolidated class action was filed, and LastPass agreed to settle for a combined total of $24.45 million: an $8.2 million general settlement fund for all class members, plus a separate $16.25 million Crypto Pool specifically for people who lost cryptocurrency. LastPass denied all claims and says it did nothing wrong. The court has not determined liability. Both sides agreed to settle.
You qualify if you had a LastPass account that was compromised, extracted, copied, stolen, or otherwise exposed as a result of the 2022 breach, and your account contained data at the time. If you received an email from LastPass about the breach or about this settlement, you are a class member.
Both individuals and businesses with LastPass accounts are included.
This settlement has multiple layers of benefits. Here is what is available.
$25 Statutory Payment: Every class member with a paid account (Consumer Premium, Consumer Family, or Business) and vault content can claim $25 cash. No documentation required.
OR instead of the $25, you can claim higher amounts with documentation:
Up to $300 for Ordinary Losses: Reimbursement for costs like credit monitoring, identity protection services, or similar expenses that are "fairly traceable" to the breach. You need receipts or documentation (not self-prepared handwritten notes).
Up to $10,000 for Extraordinary Losses: Reimbursement for identity theft, fraud, or similar losses that were "caused by" the breach. You need documentation proving the loss and an attestation connecting it to the LastPass breach.
You choose the $25 OR the documented losses -- you cannot get both. But you can get the documented losses AND the California bonus AND the crypto reimbursement if applicable.
If you were a California resident at the time of the breach and you had any type of LastPass account (free or paid), you can claim an additional $100 in CCPA statutory damages. This is on top of whatever other benefit you claim. You must attest that you lived in California at the time and that you stored qualifying personal information in your vault -- such as passwords, Social Security numbers, driver's license numbers, financial account numbers, or biometric data.
This is the part that makes this settlement unusual. If you stored crypto wallet keys, seed phrases, or other cryptocurrency access information in your LastPass vault and your crypto was stolen after the breach, you can claim up to $900,000 per person from a separate $16.25 million Crypto Pool.
Crypto claims are reviewed by a court-appointed special master (Bruce A. Friedman, Esq.) and a blockchain forensics expert -- not the regular settlement administrator. You will need to submit documentation, and the special master will determine what you are owed. The special master's decision is final.
By submitting a crypto claim, you agree to be bound by the special master's decision and give up your right to file a separate lawsuit against LastPass for crypto losses. This is an important tradeoff to understand before filing.
All valid crypto claims are paid pro rata from the Crypto Pool after administration costs, special master fees, expert costs, and class counsel's apportioned fees are deducted.
All class members who currently have a LastPass account will automatically receive Dark Web Monitoring services, which alert you if your personal data appears on dark web sites or in data leaks. No claim form is needed for this benefit.
If you were a free (Consumer Free) LastPass user at the time of the breach, you can also claim a complimentary 6-month upgrade to a Consumer Premium account. Check the box on the claim form. At the end of the 6 months, your account reverts to free unless you choose to keep premium at regular pricing. No credit card is required for the upgrade.
Submit your claim form online at LastPassSettlement.com. The deadline is July 2, 2026.
If you are claiming documented losses, include your supporting documentation with your claim. Self-prepared handwritten receipts alone are not sufficient, but they can be included to support other evidence.
An independent third party will review all claims and determine what benefits you are eligible for. Their decision is final.
Claim Deadline: July 2, 2026
Opt-Out Deadline: June 2, 2026
Objection Deadline: June 2, 2026
Final Fairness Hearing: July 14, 2026 at 2:30 PM, John Joseph Moakley U.S. Courthouse, 1 Courthouse Way, Suite 2300, Courtroom 19 (7th Floor), Boston, MA 02210, before Hon. Patti B. Saris
Download the Full Settlement Notice (PDF)
Case: In re: LastPass Data Security Incident Litigation, Case No. 1:22-cv-12047-PBS
Court: U.S. District Court, District of Massachusetts
Judge: Hon. Patti B. Saris
Defendant: LastPass US LP
Breach Period: August 2022 through November 2022
Settlement Fund: $8,200,000
Crypto Pool: $16,250,000 (up to $900,000 per person)
Combined Total: $24,450,000
$25 Statutory Payment: No proof required (paid accounts with vault content)
Ordinary Losses: Up to $300 with documentation
Extraordinary Losses: Up to $10,000 with documentation
California CCPA: $100 additional for CA residents
Crypto Claims: Up to $900,000 per person (special master review)
Dark Web Monitoring: Free for all current LastPass users (automatic)
Premium Upgrade: 6 months free for former free-tier users
Claim Deadline: July 2, 2026
Opt-Out / Objection Deadline: June 2, 2026
Final Hearing: July 14, 2026 at 2:30 PM (Boston, MA)
Attorney Fees: Up to 35% of each fund
Special Master (Crypto): Bruce A. Friedman, Esq.
Class Counsel: Berman Tabacco, DiCello Levitt LLP, Migliaccio & Rathod LLP, Zimmerman Law Offices P.C., Hausfeld LLP, Reese LLP (CA subclass)
Settlement Website: LastPassSettlement.com
How Do I Find Class Action Settlements?
Find all the latest class actions you can qualify for by getting notified of new lawsuits as soon as they are open to claims:
Filing Class Action Settlement Claims
Please note that your claim form will be rejected if you submit a settlement claim for payout with any fraudulent information. By providing this information and your sworn statement of its veracity, you agree to do so under the penalty of perjury. You would also be harming others that actually qualify for the class action settlement. If you are not sure whether or not you qualify for this class action settlement, visit the class action administrator's website at LastPassSettlement.com. OpenClassActions.com is a consumer advocacy and class action news site, and is not a class action administrator or a law firm.
For more class actions keep scrolling below.
DraftKings & FanDuel Addiction Lawsuits
Status: Open
Submit Claim
Roblox - Investigation
Pre-Qualify Here
Submit Claim
$4.17M RevitaLash Conditioner Settlement
Deadline: April 20, 2026
Submit Claim
$87.5M Beef Prices Settlement
Deadline: June 30, 2026
Submit Claim
Dollar General Bait & Switch Settlement
Deadline: April 13, 2026
Submit Claim
$2.9M Tom's of Maine Toothpaste Settlement
Deadline: July 6, 2026
Submit Claim
$990K Differin Acne Product Settlement
Deadline: May 19, 2026
Submit Claim
Cosequin Dog Supplements Settlement
Deadline: July 21, 2026
Submit Claim
Depo Provera Investigation
Deadline: Pending
Pre-Qualify
|
LastPass Data Breach Settlement Summary
|
| Status |
Open -- Accepting Claims |
| Combined Fund |
$24.45M ($8.2M fund + $16.25M crypto) |
| $25 Cash |
No proof (paid accounts w/ vault content) |
| Documented Losses |
Up to $300 ordinary / $10,000 extraordinary |
| California CCPA |
$100 additional |
| Crypto Losses |
Up to $900,000 per person |
| Claim Deadline |
July 2, 2026 |
| Hearing |
July 14, 2026 at 2:30 PM (Boston, MA) |
| Website |
Last Pass Settlement
|