The inference that the LastPass leak is responsible is being made purely on the basis that this particular person can't identify any other way the security of t

The inference that the LastPass leak is responsible is being made purely on the basis that this particular person can't identify any other way the security of their wallet was broken. That seems a very weak basis (essentially, absence of evidence equating to evidence of absence) to make what is really a very strong assertion.