The hacker used data obtained from an August breach to gain access to customer information. LastPass is still investigating the incident.