In August 2022, hacker breached data of LastPass users, but can only be accessed using the password the users used to encrypt the data, said LastPass.
I've always thought storing your data online is a
terrible feature for a password manager! Obviously the hacker still needs the user passwords, but now he got all encrypted files at once. By only storing your passwords locally, the hacker would have to hack millions of computers to get the same data.
People will always go for convenience. And you cannot deny the fact that accessing that online stored passwords across all your devices is a nice feature. It's still better than having the same (weak) password everywhere, you know...
Of course, everything that's stored online is at a certain level of risk. That's why the things (websites, apps) that hold money need at least 2FA too. And the online things should not hold meaningful amount of money.
And, bottom line, clearly, keeping wallet seed anywhere online is an awful idea, the worse possible one.