Lemonade Data Breach Exposes Drivers Licenses of Tens of Thousands of Users

On April 11, 2025, Lemonade, Inc. disclosed a data breach affecting thousands of its customers. According to official notices filed with state authorities, the breach exposed driver's license numbers, which is considered personally identifiable information (PII).

The breach was officially reported to the Texas, South Carolina, California, Iowa, Washington, and Massachusetts state attorneys general offices starting on April 11, 2025.

Impact by State:

• Massachusetts: 32,796 residents
• Washington: 2, 171 residents
• South Carolina: 1,950 residents
• Iowa: 750 residents
• Texas: 30 residents

At this time, Lemonade has not publicly identified the exact method by which the unauthorized party gained access to the data, nor have they disclosed the identity of the responsible party. The breach specifically targeted driver's license numbers, which could potentially be used for identity theft or fraudulent activities.

Lemonade's response

In response to the data breach, Lemonade has notified all affected individuals via U.S. mail. Individuals who received a notification letter from Lemonade should carefully review the details provided and follow the recommended steps to safeguard their identity.

If you have received a notice from Lemonade regarding this breach, consider the following steps to protect yourself:

• Carefully monitor your credit reports and financial accounts for suspicious or unauthorized activity.
• Consider placing a fraud alert or credit freeze on your credit file through major credit bureaus (Equifax, Experian, and TransUnion).
• Report immediately any suspicious activity or unauthorized transactions to your financial institutions and local law enforcement.

Affected individuals can also reach out directly to Lemonade, Inc. through the contact information provided in their notification letters for further assistance or clarification regarding the breach.