That shows your currently active login, which is of course in main memory. Your most recent login may well no longer be active, and so you have to search the log files.