It happened to me to but I'm no longer using LastPass for years now. I got an email saying that somebody tried to access my account from the US (the attacker is using a VPN) and changed password and recovery email on my Outlook account
Did the email say that "Someone just used your master password to try to log in to your account from a device or location we didn't recognize"
And was that master password generally secure / wasn't used anywhere else?
Thanks!