Lemonade Data Breach Exposes Drivers Licenses of Tens of Thousands of Users

On April 11, 2025, Lemonade, Inc. disclosed a data breach affecting thousands of its customers. According to official notices filed with state authorities, the breach exposed driver's license numbers, which is considered personally identifiable information (PII).

The breach was officially reported to the Texas, South Carolina, California, Iowa, Washington, and Massachusetts state Attorney Generals' offices starting on April 11, 2025. Lemonade, Inc. notified affected customers directly by mail.

Impact by State:

• Massachusetts: 32,796 residents
• Washington: 2, 171 residents
• South Carolina: 1,950 residents
• Iowa: 750 residents
• Texas: 30 residents

At this time, Lemonade has not publicly identified the exact method by which the unauthorized party gained access to the data, nor have they disclosed the identity of the responsible party. The breach specifically targeted driver's license numbers, which could potentially be used for identity theft or fraudulent activities.

While the company has not indicated whether additional personal data beyond driver's license numbers was compromised, the exposure of driver's license information alone is considered significant due to the potential misuse in identity fraud or unauthorized activities.

Lemonade's response

In response to the data breach, Lemonade, Inc. has promptly notified all affected individuals via U.S. mail to inform them of the situation and provide guidance on protecting their personal information. Individuals who received a notification letter from Lemonade, Inc. should carefully review the details provided and follow the recommended steps to safeguard their identity.

If you have received a notice from Lemonade, Inc. regarding this breach, consider the following steps to protect yourself:

• Carefully monitor your credit reports and financial accounts for suspicious or unauthorized activity.
• Consider placing a fraud alert or credit freeze on your credit file through major credit bureaus (Equifax, Experian, and TransUnion).
• Report immediately any suspicious activity or unauthorized transactions to your financial institutions and local law enforcement.

Affected individuals can also reach out directly to Lemonade, Inc. through the contact information provided in their notification letters for further assistance or clarification regarding the breach.