BleepingComputer has asked LastPass about these concerns but has not received a reply as of yet.

However, users receiving these warnings have stated that their passwords are unique to LastPass and not used elsewhere. We regularly monitor for this type of activity and will continue to take steps designed to ensure that LastPass, its users, and their data remain protected and secure,' Bacso-Albaum added. 'It’s important to note that we do not have any indication that accounts were successfully accessed or that the LastPass service was otherwise compromised by an unauthorized party. LogMeIn Global PR/AR Senior Director Nikolett Bacso-Albaum told BleepingComputer that 'LastPass investigated recent reports of blocked login attempts and determined the activity is related to fairly common bot-related activity, in which a malicious or bad actor attempts to access user accounts (in this case, LastPass) using email addresses and passwords obtained from third-party breaches related to other unaffiliated services.'

Image: Valcrist LastPass says it's credential stuffing

Lastpass m1