Security News UK fines LastPass over 2022 data breach impacting 1.6 million users BleepingComputer Daniel Bender 11 Dec 2025 The UK Information Commissioner's Office (ICO) fined the LastPass password management firm £1.2 million for failing to implement security measures that allowed an attacker to steal personal information and encrypted password vaults belonging to up to 1.6 million UK users in a 2022 breach.