LastPass disclosed a breach last month in which a threat actor stole personal customer information, including billing addresses and encrypted website login details.