The 2022 LastPass data breach has allowed threat actors to steal 12.38 million from users in a new attack.