My analysis of LastPass (correct me if I'm wrong): if your master LastPass password is unique to that site, you are likely safe, but if it's one that you've reused on other sites (check http://haveibeenpwned.com), then you should be very worried.
@ErrataRob except they leaked the entire user site history to help send targeted phish for. It's over for Last Pass as a technically competent company