This is really annoying me. One person made a claim, in the thread they consulted with security people before coming to a conclusion but as far as I can tell th

This is really annoying me. One person made a claim, in the thread they consulted with security people before coming to a conclusion but as far as I can tell they did not get someone else to investigate their disk/memory image or a response from lastpass about this. There are FTC and other regulations with hefty fines and even prison time for not disclosing breaches right? Why am I not hearing from Lastpass and why am I not seeing more users affected? I am not discounting the original users' claims I just don't have enough info to come to a conclusion. In the mean time I am seeing multiple front page posts about ditching lastpass and it seems everyone that matters is accepting there is a wider compromise. If that is the case, why isn't lastpass saying something or people with proof speaking up? Even without regulations, lastpass is liable for damage caused by their decision to delay breach notifications (which in many states, is mandated explicitly!)