Hacker News Reader

If they did, Amazon etc. would email you telling you they detected new logins from various IP addresses

Unless they have a contract with Lastpass that let's them profit from the data, that is.

If they had a contract, they wouldn't need your password.