UK fines LastPass £1.2 million for data breach affecting 1.6 million people

The report describes the 2022 LastPass security breaches: attackers stole source code and technical data from a corporate laptop and later used credentials/keys taken from a senior engineer’s personal device to access and decrypt cloud storage, exposing personal information for up to 1.6 million UK users and encrypted password vaults; the ICO fined LastPass £1.2M for failing to implement robust security measures, while concerns persist about potential cracking of stolen vaults and linked cryptocurrency thefts.