I have been a LastPass customer for over a decade, but I do not know why everyone is so quick to read these releases as "Customer data was not impacted."
No. It was. They are saying so in the cagiest way possible, but it was.
I've captured the current version of their statement here because it seems like they might be changing it without notice.
I have applauded LastPass's transparency in the past, but this hedging belies the severity of this incident, methinks.