However, out of an abundance of caution, we continued to investigate in an effort to determine what was causing the automated security alert e-mails to be triggered from our systems. We quickly worked to investigate this activity and at this time we have no indication that any LastPass accounts were compromised by an unauthorized third-party as a result of this credential stuffing, nor have we found any indication that user’s LastPass credentials were harvested by malware, rogue browser extensions or phishing campaigns. Dan DeMichele, VP of Product Management, LastPass, issued an update statement regarding the issue:Īs previously stated, LastPass is aware of and has been investigating recent reports of users receiving e-mails alerting them to blocked login attempts. Update, 12/29/21 8:07 am Eastern: LastPass further investigated the issue and found that the alerts were sent in error. Fortunately, LastPass has responded to the issue, and the password manager says it hasn’t leaked any user information. Several LastPass users claim that they’re receiving emails from the company about unauthorized login attempts using their master passwords.

Lastpass forgot master password