Canadians have until June 23 to claim up to $500 from LastPass breach settlement
Class-action settlement worth $4.2 million CAD opens claims for affected users whose data was stolen in 2022.
The day's top stories, food & events — every morning at 7. Unsubscribe anytime.
Canadians affected by the 2022 LastPass data breach have until 11:59 p.m. PT on June 23, 2026 to file a claim for compensation from a court-approved class-action settlement worth US$3 million (approximately C$4.2 million).
LastPass, a cloud-based password manager, was targeted by an unknown threat actor in 2022 who gained access using stolen credentials from a senior employee. The breach affected 1,102,688 user accounts in Canada, though at least 218,087 of these contained no user data.
Plaintiff Karan Keswani filed the lawsuit in British Columbia's Supreme Court against GoTo Technologies USA, Inc., LastPass US LP, GoTo Technologies Canada Ltd., and LastPass Technologies Canada ULC, alleging the company was negligent and failed to protect users' personal information from cyber threats.
Eligible Canadians can file three types of claims:
— Wasted time: up to five hours at C$34.01 per hour, totaling a maximum of C$170.05. — Out-of-pocket expenses: reimbursement up to C$500 for expenses incurred before May 31, 2023, with proof required. — Crypto claims: for crypto assets allegedly lost due to the breach.
To file, Canadians must complete a claim form online, providing personal information, address, claim type, supporting documents where applicable, and preferred payment method (cheque or Interac e-Transfer).
The settlement, approved on February 18, is "not an admission of liability, wrongdoing, or fault" by the defendants, according to law firm KND Complex Litigation. The defendants have denied all allegations.
Visit the LastPass class action website for complete eligibility details and the claim form.