LastPass fined £1.2 million by UK regulator over data breach affecting 1.6 million users

LastPass was fined £1.2 million by the UK's ICO for failing to implement adequate security measures, which led to a data breach affecting 1.6 million users. The breach allowed unauthorized access to LastPass's backup database. The ICO concluded that the company's security was not robust enough, leaving users vulnerable despite the company's promise to enhance security. This incident highlights the importance of comprehensive security beyond just password protection, emphasizing governance and supplier risk management in the cybersecurity industry.