LastPass confirms cybercriminals stole its customers’ encrypted password vaults in a data breach earlier this year.