Someone has filed a petition for a class action against LastPass, claiming its security measures were “woefully insufficient.” The password management company suffered a breach in August, leading to an even worse leak where hackers got their hands on customers’ encrypted passwords.

The person who filed the complaint claims to have lost thousands of dollars in Bitcoin because of the hack, though that could be hard to prove.

There’s no promise this lawsuit will go anywhere, but LastPass probably didn’t need more to worry about right now. Several security experts have heavily criticized LastPass’ security, as well as the way it disclosed the breaches.