LastPass says an attacker used information stolen during a previous intrusion to gain access to a cloud storage service and obtain customer data.