This is a classic example for ‘ a chain is as strong as the weakest link’ . All your passwords are under the risk of compromise unless you didn’t set a complex master password. LastPass should have had encrypted vault with a mix of user password and their own password.