Skip to content
LastPass fined £1.2M for 2022 data breach affecting 1.6M UK users

LastPass fined £1.2M for 2022 data breach affecting 1.6M UK users

First seen 11 Dec 2025, 17:52 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

LastPass UK Ltd has been fined £1.2 million by the UK's Information Commissioner's Office for a data breach that occurred in 2022, compromising the personal information of up to 1.6 million UK users. The ICO found that LastPass failed to implement adequate security measures, allowing unauthorized access to its backup database, although there is no evidence that customer passwords were unencrypted.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 213d ago How this analysis works

More articles in this cluster (7)

Following this threat?

Track LastPass and CVE-2020-5741 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed