Adding to the chorus. I used LastPass until 2018. I received a similar email from LastPass (and had forgotten that I never got around to actually deleting the account after I migrated).
My master password was a long multi word phrase with numbers and special characters, and was not used for anything except LastPass. I find their claims of credential stuffing suspect.
Edit -- Also had MFA enabled and received the email in November.
My master password was a long multi word phrase with numbers and special characters, and was not used for anything except LastPass. I find their claims of credential stuffing suspect.
Edit -- Also had MFA enabled and received the email in November.