Except with unencrypted urls, combined with a dataset of previously leaked pws and someone who uses a pw at another leaked place as their master password … means that encrypted lastpass acct is now open.

The bottom line is: hacks are bad.