LastPass

01. Company

LastPass is a computer and network security company founded in 2008. Headquartered at 125 High Street in Boston, Massachusetts, the firm employs between 501 and 1,000 people ^[1]. It is privately owned by Francisco Partners and Elliott Investment Management following its acquisition from GoTo in 2024. The company serves over 100,000 businesses and millions of individual users globally. LastPass reported $200 million in revenue in 2021.

02. Product

LastPass offers a password management and identity management platform known as Secure Access Essentials ^[1]. The solution provides secure access to AI, applications, and credentials directly from the browser. It supports single sign-on, federated identity management, and cloud-based vault storage. The product is widely used across software, finance, education, and business services sectors. Key competitors in the password management space include Bitwarden, Dashlane, Keeper, and RoboForm.

03.Security & Risk

LastPass maintains a Trust Center and holds industry certifications including ISO 27001, SOC 2 Type II, SOC 3, and BSI C5. However, the vendor's security posture has been severely compromised by a 2022 breach where attackers exploited a third-party software vulnerability. The UK Information Commissioner’s Office fined LastPass £1.2 million in late 2025 for failing to implement appropriate technical measures, such as allowing personal laptop access to production keys and failing to rotate AWS keys. The breach resulted in cracked encrypted vaults and ongoing customer data exposure.

04. Events

• [breach] Klue Supply Chain Attack

  In June 2026, LastPass was affected by a supply chain attack on Klue, resulting in the theft of customer support case data.

  Jun 12, 2026, 12:00 AM · Source

• [legal] UK ICO Fine

  The UK ICO fined LastPass £1.2 million in November 2025 for GDPR violations and failure to implement appropriate technical and organizational measures.

  Nov 1, 2025, 12:00 AM · Source

• [legal] US Class Action Settlement

  LastPass settled a US class action lawsuit for $24.5 million in 2025 regarding losses from the 2022 breach.

  Jan 1, 2025, 12:00 AM · Source

• [breach] 2022 Data Breach

  Attackers exploited a third-party software vulnerability to access source code and encrypted password vaults, leading to cracked vaults and stolen crypto.

  Aug 1, 2022, 12:00 AM · Source

05. Competitors

Vendors offering a similar product or service - for side-by-side comparison, not a ranking.

• Bitwarden

  Vet this vendor →

• Dashlane

  Vet this vendor →

• Keeper

  Vet this vendor →

• RoboForm

  Vet this vendor →

06. Recent News

Recent news highlights the long-term fallout from the 2022 data breach, including a $24.5 million US class action settlement in 2025 and a Canadian settlement approved in February 2026. The UK ICO issued a £1.2 million penalty in November 2025 for GDPR violations affecting over one million UK data subjects. In June 2026, LastPass was impacted by a supply chain attack on Klue, resulting in the theft of customer support case data. These events underscore persistent security and compliance challenges for the vendor.

07. Citations

1. [1] LastPass is a computer and network security company headquartered in Boston, Massachusetts, with an estimated 501 to 1000 employees. LastPass Company Overview, Contact Details & Competitors | LeadIQ

11. Vendor response

Content in this section is vendor-supplied and does not alter Vendorisk.ai's risk tier or evaluation.