Deadline nears for Canadians to claim up to $500 in LastPass settlement

Canadians who were affected by the 2022 LastPass data breach have less than three weeks to file claims for compensation from a court-approved settlement worth US$3 million (approximately C$4.14 million).

LastPass, a cloud-based password manager storing usernames, passwords, and other sensitive information, was targeted by an unknown threat actor in 2022 who accessed credentials stolen from a senior employee. The breach exposed encrypted and unencrypted user data for more than 1.1 million Canadian accounts, though at least 218,087 of these contained no user data.

Plaintiff Karan Keswani brought the class-action lawsuit against GoTo Technologies USA, Inc., LastPass US LP, and related Canadian entities, alleging negligence and failure to protect users' personal information. The defendants have denied all allegations. A settlement was approved February 18.

Eligible Canadians can claim compensation in three categories. Wasted time claims offer C$34.01 per hour for up to five hours (maximum C$170.05). Out-of-pocket expenses claims reimburse up to C$500 if proof of expenses incurred before May 31, 2023 is provided. Crypto claims are also available for assets allegedly lost due to the breach.

Claims must be filed online by 11:59 p.m. PT on June 23. Claimants need to provide personal information, address, claim type, supporting documents, and preferred payment method (cheque or Interac e-Transfer). More information is available at the LastPass class action website.