Millions of passwords stolen from LastPass earlier than company disclosed

LastPass now seems willing to provide further information about the hack to users, but only in a physical meeting, and if the invitees sign a nondisclosure agreement beforehand

WTF? This reeks to me as "we don't want to risk any record[ing] of what we disclose getting out"

Seriously. That was exactly my response. Sure, LastPass I'll be right over.

I need to get off my arse and rotate my most valuable passwords.

It seems like every time I read about this company in the news it's about they weren't truthful about the severity and timing of their security breaches. For a company focused on secret credential management I am not sure I could come up with a worse set of events and conduct.

It's a rewrite on an article behind a paywall referencing one manager who supposedly got the offer. Anyone know what it actually said? I really dislike this modern whisper game.