Writing more about #LastPassBreach feels like beating a dead horse. But I had a look at the official statement again and it is highly misleading. I felt the need to provide some context that #LastPass is willingly omitting.

“Again, it seems that LastPass attempts to minimize the risk of litigation (hence alerting businesses) while also trying to prevent a public outcry (so not notifying the general public). Priorities…”

https://palant.info/2022/12/26/whats-in-a-pr-statement-lastpass-breach-explained/

What’s in a PR statement: LastPass breach explained

The LastPass statement on their latest breach is full of omissions, half-truths and outright lies. I’m providing the necessary context for some of their claims.

Almost Secure

@WPalant They did the *exact* same thing with the last time they did this.
While they sent out a bunch of emails to say someone logged into your account, in their 'apology' statement, they said we shouldn't be reusing passwords and such.

I already had left LP before that, but that kind of condescending attitude told me everything I need to know about the company.