[bb101]

Field 6 "sharedfromaid": "aid of the sharer's Site/Secure Note" is unencrypted. The hackers will be able to infer relationships between Lastpass users.

Field 10: "genpw": "Is an auto-saved generated password". Good for deciding whether to brute force or not.

Yikes. I can't imagine why anyone would trust Lastpass after this.

[wlonkly]

Last password change date is a good way to figure out if a password is in a known breach dump, too.