LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds

TRM Labs reveals that encrypted vault backups stolen in the 2022 LastPass data breach continue to enable cybercriminals to crack weak master passwords and drain cryptocurrency assets through late 2025. Russian cybercriminal actors are believed to be involved in these ongoing attacks. The breach demonstrates the long-term impact of password manager compromises, where attackers can persistently attempt to crack encrypted vaults over years. Victims with weak master passwords remain vulnerable to having their cryptocurrency wallets accessed and drained. The findings highlight the critical importance of strong master passwords for password manager security.