LastPass issued a second statement on December 30, 2021, stating that at least some of the security alerts were sent to users inadvertently. LastPass emails indicate that a login attempt was rejected. The login attempt originated in Brazil in the case of the thread starter.