For what it's worth, I haven't received a notification of an attempt to login to my LastPass account. My LastPass password is horrendous and for sure not used elsewhere, and even if someone does gain access, I don't store passwords to major financial or email accounts in there.