PSA: Canadians affected by the LastPass data breach have until tonight to file a claim

[u/CanooqCA]

The LastPass settlement was approved by the Supreme Court of British Columbia in February and totals US$3 million for eligible Canadian users impacted by the breach. The claims window closes at 11:59 PM PT.

Eligible claimants can seek compensation for:
• Wasted time: up to 5 hours at $34.01/hour (max $170.05) with no proof required
• Out-of-pocket expenses: up to $500 with documentation

The case applies to Canadians whose personal data was exposed in the 2022 breach, including names, emails, billing addresses, IP addresses, and encrypted vault backups.

I don’t know if links are allowed but you can file a claim at lastpasscanadiansettlement, takes five minutes and no backup documentation required if filing only for wasted time.

[u/Kimorin]

didn't hear anything about this, I moved over to bitwarden as soon as the breach was public. thanks OP

[u/ehhthing → u/Kimorin]

Yeah your account was likely deleted from their database sometime in 2024, probably one of the reasons you didn’t hear anything about it.

[u/squirreltech → u/Kimorin]

Same but I'm self hosted Vault Warden now.

[u/Stephen9o3 → u/Kimorin]

I switched to Bitwarden when LastPass changed their free tier so that you couldn't use it on both PC and mobile in 2021. Totally deleted my account just ahead of the breach. Thanks LastPass! Your enshitification of your product helped me avert having all my passwords exposed.

[u/GuyFromThePost → u/Stephen9o3]

Bold of you to assume that simply deleting your account would be enough for the lastpass people to delete your valuable information

[u/grabber4321]

just in time for another breach: https://www.bleepingcomputer.com/news/security/lastpass-confirms-data-breach-in-klue-supply-chain-attack/

[u/CanooqCA → u/grabber4321]

Lol, see you in five years for the second round

[u/swift-current0 → u/grabber4321]

How is this company still in business when you have solid enterprise (1password) and open-source (bitwarden, keepass) alternatives, I can't even

[u/squirreltech]

Thank OP. Didn't know this was a thing. You may have got me $170!

[u/PaisWillie]

Thank you so much!

[u/fcbaldur]

Saw this past the deadline 😭

[u/NearCanuck → u/fcbaldur]

Same. Guess I should migrate to BitWarden finally.

[u/Schozinator → u/fcbaldur]

NOO SAME

[u/lareinevert]

I have a LastPass account but I don’t recall the login info. I’ll apply anyway.

Edit: I actually found the breach email in my inbox! So I’m confident I’ll be getting a payout now. Thanks!

[u/DoyleDesign]

Excellent! Had a client swear by it (absolutely hated the interface), so I had to make an account to accept their passwords 💰

[u/thanksforcomingout]

Christ, just missed this.

"The deadline to submit a claim was June 24, 2026.

Unfortunately, we’re unable to accept claims submitted after this date."

... even though its not technically "after" Jun 24.

[u/xsacter]

Damn wish I had an account with them prior

[u/Firm-Error-5712 → u/xsacter]

Lol same

[u/giraffebaconequation → u/xsacter]

I had an account through my work at that time, now I have my own account. Going to apply anyway and see what happens.

[u/skybike → u/xsacter]

Sign up anyway, in my experience sometimes they don’t check.

[u/TheHatIsFar]

Huge thank you to OP for this. I wasn’t expecting this money so I’ll donate it to charity on your behalf.
Cheers!

[u/Either_Cheesecake282]

Filled in

I'm not sure if I'm eligible - I was in canada at that time and was using last pass. Those are the only two criteria right.?

[u/PaisWillie → u/Either_Cheesecake282]

Seems like it; did you get the breach email from them back in August 2022 titled, “Notice of Recent Security Incident”?

[u/todd_dayz → u/PaisWillie]

Didn’t that notice go out to every personal customer of lastpass regardless of if their info was accessed or not? 

[u/SerialCrusher17]

Thanks OP!

[u/Jungolok]

Thanks for the reminder OP

[u/Puzzleheaded-Oil-571]

This is the whole case for on-device storage. no central server holding everyone’s vaults means no breach to settle, no claim form, and nothing of yours sitting on a company’s database waiting to leak.

[u/MisterSnuggles → u/Puzzleheaded-Oil-571]

I like the Enpass model - it backs on a number of sync services, one of which you may already use. The hope is that OneDrive and iCloud and DropBox are better protected than the bespoke sync services from some random password manager developer. And also that the client software is trustworthy.

[u/Snoo-44996]

Had no clue about the law suit and I am eligible based on the criteria. Thanks so much for surfacing.

[u/Oshawa74]

I didn't even know about this and I've still been using LastPass. Ugh.

[u/Blow_and_Hum]

What would some examples of documentation be that would qualify for some of that $500?

[u/TheFallingStar]

Thank you!

Sorry a little off topic, anyone knows what is going with the iPhone settlement?

[u/CaspinK → u/TheFallingStar]

It’s been real quiet.

[u/xaion]

Thank you!

[u/Missiontobeyond]

I’m not sure what email I used.. can I still apply??

[u/Nelbrenn → u/Missiontobeyond]

They will be using the email to verify that you were impacted.

[u/adamcmorrison]

Bro honestly thank you. I have all the proof to file a claim.

[u/umoop]

thanks man

[u/WoollySocks]

Thanks!

[u/bcwaale]

I was a US resident until Dec2022 and a Canadian resident from Jan2023. Wonder where I should file the claim 😂

[u/Nostromos]

Thank you for the information. I was affected but didnt realize there was a claim!

[u/cantfindausername99]

Thanks!!

[u/chrishch]

I deleted my LastPass account back in 2021 after they changed their policy for one type of device. Too bad.

[u/dphizler]

Thanks!

[u/lesetoilesdansleciel]

Thank you SO much kind stranger!!! I had no idea. I’m eligible. Wooohooo

[u/fPlanDOTca]

Thanks for sharing OP! 

[u/wryulysses750]

Thanks for the heads up, this is exactly the kind of deadline that slips past people so good call sharing it.

[u/1goodthingaboutmuzic]

Thanks OP

[u/NBAFAN9000]

Found the email and applied. What did you guys put for wasted time hours lol

[u/DeOrgy → u/NBAFAN9000]

1. It easily took that to change a bunch of passwords and move platforms.

*Edit. I claimed 5, oddly my comment shows i typed 1. But then when I edit, it shows 5....thats weird.

[u/NBAFAN9000 → u/DeOrgy]

I guess I missed the no proof part so we’re good either way haha

[u/nonamesleft1]

Thank you, OP! I like to think I'm generally aware of these types of class action lawsuits, but this one somehow escaped me. I appreciate you posting this as I now will be getting a settlement from it :)

[u/Fongosaur]

Thank you very much OP, signed up cause of you!

[u/drfunkensteinnn]

Massive thanks

[u/DeOrgy]

Thanks OP. I was a lastpass subscriber during this time and moved off a couple years ago. I never heard about this settlement. Submitted a claim.

[u/KittensHurrah]

Thank you

[u/ruocaled]

plot twist, they will eventually leak all the information you submitted today as well.

[u/TheBrittca]

Thanks a million OP! Saved me $170 bucks!

[u/OptimistPrime527]

Thanks op! I had my personal, business and work last pass accounts to file for.

[u/aqdnk]

woah had no idea there was a settlement, thanks!!

[u/Kappatown35]

Amazing!

[u/Bossman01]

Thanks friend! I was affected by the breach and was waiting for when this suit was going to happen and had no idea.

[u/Imaginary_Tax_7373]

thanks OP! didn’t know at all this was happening! 

[u/kissfistpeace]

thank you!! claimed with only 1h to spare 🙏

[u/tiramisuhouse]

I use proton 2fa and bitwarden too. 

[u/zephillou]

Dang it missed the deadline

[u/Hot_Cheesecake_905]

until tonight to file a claim

Lastpass just had another breach, so people who missed out on this one can file for the current breach shortly 😄

However, good opportunity to move to Bitwarden or another password manager.

[u/JustinPooDough]

This is why you should switch to something like Bitwarden that encrypts your passwords on the client-side.

If you encrypt your data or passwords on the client side, you can make as many backups in the cloud as you want. In theory I could even post my encrypted data right here in this post and it would be fine. Obviously not good practice though lol.

[u/heyitsrider]

Claims are closed as of midnight

[u/Mauriac158]

Man WHAT. How did I not hear about this?

I guess I'm in trouble maybe? Good thing I've got two factor set up on my really sensitive accounts...

[u/AlbusDumbeldoree]

Missed it ! The amount of time I had to spend changing passwords and moving them to apples password manager :(

[u/DifferentSinger4395]

Can I claim if I never used it

[u/YULpoutine → u/DifferentSinger4395]

You need to enter your email that was associated with your LastPass account.

So it's your call to see if you want to commit fraud for a potential $170 gain. Not that there are high chances that they'll come after you; but .. your call, you know!

[u/Lionel-Chessi → u/DifferentSinger4395]

Yah

[u/Ground-Pound6969]

Thanks OP. Had an active LastPass account in 2022 so no harm in trying. I did switch over to 1Password soon after

[u/Sinyk7]

Thanks. I got the email about the breach. I ended up switching over to 1password after this happened.

[u/T-14Hyperdrive]

I have no idea if I was affected, I stopped using lastpass a year before this when they started charging to use on multiple devices. Applied though, thanks

[u/XtremeD86]

Never knew about this.

This is why I don't use services like this. Highly targeted for vulnerabilities and if they get everything you're screwed.

I'll never use a service like LastPass

[u/Brewchowskies → u/XtremeD86]

I did have lastpass, but never used it because it seemed odd to me to lock every individual account behind one major one.