ICO fine: LastPass, 2022 breach data breach case

UK Information Commissioner's Office · decided Dec 11, 2025 · Decided

Decision

The ICO found weak security let a hacker who compromised employee laptops in August 2022 reach a backup database holding data of up to 1.6 million UK users.

Related cases

When	Case	Kind	Status	Filed
Aug 13, 2025Filed 13mo agofiled	In re Coinbase Customer Data Security Breach LitigationActiveData breachS.D. N.Y.	Data breach	Active	Aug 13, 2025
Jun 17, 2025Filed 15mo agofiled	ICO fine: 23andMe, genetic data breachDecidedData breachUK Information Commissioner's OfficeGBP 2.31 million	Data breach	Decided	Jun 17, 2025
Apr 8, 2025Filed 18mo agofiled	In re PowerSchool Customer Data Security Breach LitigationActiveData breachS.D. Cal.	Data breach	Active	Apr 8, 2025
Jan 15, 2025Filed 20mo agofiled	FTC: GoDaddy, hosting securitySettledData breachUS Federal Trade Commission	Data breach	Settled	Jan 15, 2025
Dec 17, 2024Filed 21mo agofiled	DPC fine: Meta, 2018 Facebook breachDecidedData breachIrish DPCEUR 251 million	Data breach	Decided	Dec 17, 2024
Oct 9, 2024Filed 24mo agofiled	FTC: Marriott and Starwood, data breachesSettledData breachUS Federal Trade Commission	Data breach	Settled	Oct 9, 2024
Oct 8, 2024Filed 24mo agofiled	In re Snowflake Data Security Breach LitigationActiveData breachD. Mont.	Data breach	Active	Oct 8, 2024
Sep 27, 2024Filed 24mo agofiled	DPC fine: Meta, plaintext passwordsDecidedData breachIrish DPCEUR 91 million	Data breach	Decided	Sep 27, 2024