LastPass now seems willing to provide further information about the hack to users, but only in a physical meeting, and if the invitees sign a nondisclosure agreement beforehand
WTF? This reeks to me as "we don't want to risk any record[ing] of what we disclose getting out"