LastPass, a leading password manager, disclosed on December 22, 2022, that it suffered a security incident involving an unauthorized party exfiltrating a backup of customer vault data and other personally identifiable information PII through a cloud-based storage service.