LastPass UK Ltd

Summary

LastPass UK Ltd was fined £1,228,283 by the ICO for failing to implement appropriate technical and organizational security measures, resulting in a data breach affecting approximately 1.6 million UK customers whose personal data was exfiltrated from backup databases. The violation involved infringements of UK GDPR Articles 5(1)(f) and 32(1)(f) concerning data integrity, confidentiality, and security obligations.