Latest / California / April 2025

Lemonade, Inc.

Lemonade, Inc. notified California AG on Apr 11, 2025 of a data breach, which occurred on Sep 18, 2024. Data exposed: Postal address, Name.

All 3 filings by Lemonade, Inc., state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
Lemonade, Inc.
Source
California AG · source record
Date reported
Apr 11, 2025
Date(s) of breach
Saturday, April 1, 2023Wednesday, September 18, 2024
Residents affected
Not published by this source
Data exposed
Postal address Name
Notice letter
Sample notice (PDF)
Discovered
Mar 14, 2025, as stated in the letter
"On March 14, 2025, we learned that due to a vulnerability in our Online Flow, certain driver’s license numbers for identifiable individuals were likely exposed."
Days to notice
28 days from discovery (Mar 14, 2025) to the California record (Apr 11, 2025). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82).
Offered in the letter
credit or identity monitoring through Experian
Third party
The letter attributes the incident to a vendor or service provider
First seen by BreachTally
2026-10-30 15:30 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 15:30 UTC on Oct 30, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Other filings by Lemonade, Inc.

OrganizationSourceStateReportedResidents affectedData exposed
Lemonade, Inc. California AG CA Jun 12, 2025 Not published Postal addressName
Lemonade, Inc. Oregon DOJ OR Apr 11, 2025 190,000 Not stated

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.