2022 LastPass UK — 1.6M users, developer laptop
Data compromised
Names, emails, phones, URLs
Technical writeup
Hacker compromised developer laptop, then senior employee Plex. Customer names, emails, phones, URLs. Passwords remained encrypted. ICO fined £1.2M in 2025.
Root cause
Phishing; keylogger