LastPass fined £1.2M for 2022 data breach affecting 1.6M UK users

LastPass fined £1.2M for 2022 data breach affecting 1.6M UK users

First seen 11 Dec 2025, 17:52 UTC Ico.UkTheregisterBleepingcomputerThecyberexpressInfosecurity-Magazine 32.7

Article Content

Browse articles
ThreatCluster

LastPass UK Ltd has been fined £1.2 million by the UK's Information Commissioner's Office for a data breach that occurred in 2022, compromising the personal information of up to 1.6 million UK users. The ICO found that LastPass failed to implement adequate security measures, allowing unauthorized access to its backup database, although there is no evidence that customer passwords were unencrypted.