This is a great breakdown of LastPass’s blogpost about their security breach and everything left unsaid.
Even if you don’t blame them for being breached given how much of a high value target they are, you should blame them for downplaying the severity and not taking enough action to protect their customers.
https://palant.info/2022/12/26/whats-in-a-pr-statement-lastpass-breach-explained/