Hacker News Reader

Even better, they can login to your bank accounts, amazon account, etc...

If they did, Amazon etc. would email you telling you they detected new logins from various IP addresses

Unless they have a contract with Lastpass that let's them profit from the data, that is.

If they had a contract, they wouldn't need your password.