Deadline: July 2, 2026
Last updated: April 8, 2026
LastPass Data Breach Settlement 2026 -- Your Passwords Leaked, Now File a Claim by July 2
LastPass agreed to an $8.2M settlement after hackers helped themselves to user vault data in 2022. Claim up to $10,000 by July 2, 2026.
Deadline: July 2, 2026
File Your Claim →
Applies to
Nationwide
Main deadline
July 2, 2026
Benefit
Cash payments up to $10,000, a $100 bonus for California residents, and free Dark Web Monitoring -- because someone should be watching.
Official site
https://lastpasssettlement.com
What happened
Class period: August 1, 2022 through November 2022
Between August and November 2022, a cybercriminal attacked LastPass's systems and walked off with both encrypted and unencrypted backup data from the company's cloud storage. The app whose entire job was keeping your passwords safe had a bad year.
Starting in December 2022, affected users filed class action lawsuits that were consolidated in the U.S. District Court for the District of Massachusetts. LastPass denies wrongdoing but agreed to an $8.2 million settlement fund, plus a separate $16.25 million Crypto Pool for users claiming cryptocurrency losses tied to the breach.
What you can get
Statutory Payment
$25
For Premium, Family, or Business account holders with vault content at the time of the incident Ordinary Loss Relief
Key dates
| Action | Date | What it means |
|---|---|---|
| Claim deadline | July 2, 2026 | Last day to file a claim |
| Opt out | June 2, 2026 | Keep your right to sue separately |
| Object | June 2, 2026 | Tell the court you disagree |
| Final hearing | July 14, 2026, at 2:30 p.m. ET -- John Joseph Moakley U.S. Courthouse, 1 Courthouse Way, Suite 2300, Boston, MA 02210 (Courtroom 19, 7th Floor) | Judge decides whether to approve |
Who may qualify
- Received an email from LastPass about the 2022 data security incident or about this settlement
- Had a LastPass account that was compromised, copied, or exposed during the August–November 2022 incident
- Account contained data at the time of the incident
- Are a U.S. resident or a company registered to do business in the United States
- California residents who stored qualifying personal data in their vault may also claim the $100 CCPA payment
How to file
- Go to lastpasssettlement.com and click "Start Your Claim"
- Log in with the Unique ID and PIN from your email notice (call 1-877-748-1875 if you cannot find them)
- Confirm your account type, whether your vault contained data, your state of residence, and which benefit you are claiming
- Upload any required supporting documentation for loss claims
- Submit your completed form by July 2, 2026 (11:59 p.m. ET for online submissions)
- To file by mail: print, sign, and date the Claim Form and mail it to the Settlement Administrator so it is postmarked by July 2, 2026
Proof required
- Unique ID and PIN from your email notice (required to file online)
- For Ordinary Loss Relief: receipts, invoices, bank or credit card statements, or other documentation showing costs traceable to the incident and incurred after August 1, 2022
- For Extraordinary Loss Relief: documentation showing losses caused by the incident, incurred after August 1, 2022
- For Crypto Pool claims: wallet or transaction records and other blockchain documentation
- Self-prepared documents such as handwritten notes are not sufficient on their own but may be used to support other documentation
Payment timing
Payments cannot be sent until after the court grants Final Approval at the July 14, 2026 hearing. Processing time and any appeals may extend that timeline further. Check lastpasssettlement.com for payment method details as the settlement progresses.
Important links
Contact
Phone: 1-877-748-1875
Email: info@LastPassSettlement.com
Mail: LastPass Data Security Incident Litigation Settlement Administrator P.O. Box 2230 Portland, OR 97208-2230
Extra details
- Dark Web Monitoring is automatic for all current LastPass users -- no claim required. Consider it LastPass keeping an eye out, now that the damage is done.
- Free account users at the time of the incident are eligible for a 6-month Consumer Premium upgrade, but must request it on the claim form.
- Do not share your seed phrases, private keys, or LastPass master password during your online claim submission. Crypto claimants may be contacted through a secure portal only -- never by email.
- If you do nothing, you will not receive any settlement benefits but will still give up your right to sue LastPass over the claims resolved by this settlement.
- Watch for scams. Only use the official site: lastpasssettlement.com.
FAQ
Who qualifies for the LastPass settlement?
Anyone whose LastPass account was compromised during the August–November 2022 data security incident and whose account contained data at the time. You likely received an email from LastPass about the incident or about this settlement.
How much can I get?
Most claimants can choose between a flat $25 payment or reimbursement of up to $300 for documented ordinary losses and up to $10,000 for documented extraordinary losses caused by the breach. California residents can also claim an additional $100 CCPA payment on top of any other benefit. Cryptocurrency losses may be reimbursed up to $900,000 per claimant through the separate Crypto Pool, subject to a $16.25 million aggregate cap.
What is the deadline to file?
July 2, 2026. Online claims must be submitted by 11:59 p.m. ET. Mailed claims must be postmarked by July 2, 2026.
Do I need proof to file?
For the $25 statutory payment, you just need to confirm your account information. For Ordinary or Extraordinary Loss Relief, you must submit documentation -- such as receipts, invoices, or bank statements -- showing losses traceable to the incident. Self-prepared documents like handwritten notes are not enough on their own.
What if I lost cryptocurrency because of the LastPass breach?
You may file a separate claim for crypto losses through the Crypto Pool. A court-appointed special master will review these claims. Do not include seed phrases, private keys, or your master password in your claim submission -- you may be contacted through a secure portal if additional information is needed.
What if I do not have my Unique ID or PIN?
Contact the Settlement Administrator at 1-877-748-1875 or info@LastPassSettlement.com for assistance.
When will payments be sent?
Payments will not be distributed until after the Final Approval Hearing on July 14, 2026, and may be delayed if there are appeals. Check lastpasssettlement.com for the latest updates.
Can I opt out of the settlement?
Yes, but you must mail an opt-out request postmarked by June 2, 2026. If you opt out, you will not receive any settlement benefits but may retain the right to sue LastPass separately. You cannot opt out online, by phone, or by email.
What if I had a free LastPass account?
Free account holders do not qualify for the $25 statutory payment or loss reimbursements, but are eligible for the 6-month Consumer Premium upgrade and Dark Web Monitoring. California residents with any account type -- including free accounts -- may qualify for the $100 CCPA payment if they stored qualifying personal data in their vault.
Use the official website
Always confirm details on the official site. If something feels off, stop and verify before sharing personal info.
Info only. Verify details on the official site. Not legal, financial, or tax advice. Legal
Share this: