LastPass Data Security Incident Litigation

Before Claim Filing: You will need the Unique ID and PIN included in the Email Notice you received. If you did not receive an Email Notice or have lost yours, please contact the Settlement Administrator at 1-877-748-1875 for assistance.

During Claim Filing: As part of filling out your Claim Form, you will be asked to confirm

1. your LastPass account type as of the Incident (August – November 2022);
2. whether your vault contained data at the time of the Incident;
3. whether you were a California resident at the time of the Incident (for the $100 CCPA payment); and
4. which benefit you’re requesting ($25 Statutory Payment or Ordinary/Extraordinary Loss Relief, and optional Crypto Pool benefits for cryptocurrency losses).

Only one claim may be submitted per person or entity.

Important note regarding crypto claims: Do not include seed phrases, private keys, or your LastPass master password during this submission. If you request Crypto Pool benefits, the Settlement Administrator or Special Master will contact you through a secure portal for any additional steps. Only after a prima facie review could you be asked for your master password from around September 2022 to unlock a forensically preserved copy of your vault—never by email.

Supporting Documentation: You must submit supporting documentation for any claimed monetary losses (including cryptocurrency losses), such as receipts, invoices, bank/credit card or exchange statements, correspondence showing fees or reimbursements, or relevant wallet/transaction records.

For Ordinary Loss Relief and/or Extraordinary Loss Relief, documentation must show that the cost or loss is actual, documented, and unreimbursed, is fairly traceable to (Ordinary) or caused by (Extraordinary) the Incident, and was incurred after August 1, 2022.

“Self-prepared” items (e.g., handwritten notes or personal declarations) alone are insufficient but may be used to clarify or support other documents.

You must also include an attestation that your monetary losses are fairly traceable to (for Ordinary Loss Relief) or caused by (for Extraordinary Loss Relief) the Incident and were not incurred due to some other event.

Supporting documentation should be clear, readable copies. For privacy, you may redact account numbers to the last 4 digits, keeping your name, dates, and amounts visible. Keep copies of everything you submit; claims may be audited, and you may be asked for additional information. Documents that are uploaded must be less than 20 MB per file and in one of these formats: jpg, jpeg, png, gif, tif, tiff, doc, docx, xls, xlsx, pdf, txt, rtf, or zip. If you are unable to electronically upload a copy of your documents as part of the online Claim Form, you will need to mail a printed Claim Form following the instructions below.

After Claim Filing: After submitting your completed Claim Form online, you will receive an email with a confirmation code for your completed submission. Be sure to keep your confirmation email and code and refer back to them if you have any questions about your Claim Form. If additional information is required to complete your claim, you will be contacted by the Settlement Administrator.

Please use the login below to get started.

Fill out, sign, and date the Claim Form, then mail the Claim Form to the following address:

LastPass Data Security Incident Litigation
Settlement Administrator
P.O. Box 2230
Portland, OR 97208-2230