Stolen crypto from 2022 LastPass breach enables multi-year theft campaign

Back Cyberinsider

Stolen crypto from 2022 LastPass breach enables multi-year theft campaign

Cyberinsider • December 26, 2025

Share: View original

Security analysts warn that vault data stolen in 2022 can still be exploited today, especially if users have never updated their master passwords.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

LastPass Breach Vaults Still Exploited for Crypto Theft in 2025 Stolen vault backups from the 2022 LastPass breach continue to be exploited, allowing attackers to steal cryptocurrency through weak master passwords. Security analysts indicate that users who have not updated their passwords remain at risk, with incidents of theft occurring as late as 2025. 2 sources 33

Extracted Entities

Attack Types (1)

Companies (1)