Where does the Lemonade Inc case file come from?

Every entry is taken from the breach report Lemonade Inc lodged with the Indiana Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Lemonade Inc Data Breach

This file collects the dated facts on record for the Lemonade Inc incident. The state report is dated April 10, 2025. The incident itself is dated April 1, 2023.

Timeline

740 days separate the incident date from the date it was reported.

April 1, 2023Incident dateWhen the filing says the breach took place.
April 10, 2025Report filed in IndianaDate the notice was lodged with the Indiana Attorney General.

Case facts

Filing state: Indiana
Date reported: April 10, 2025
Incident date: April 1, 2023
Receiving office: Indiana Attorney General

Case notes

Lemonade Inc, an insurance technology company, filed a data breach notification with the State of Indiana on April 10, 2025. This filing informs the public about a security incident that potentially compromised information held by the company.

According to the public record, the breach type is listed as "unspecified." Due to this lack of specificity, the exact categories of personal information that may have been involved in this incident are not detailed in the available documentation. Individuals who receive notifications from Lemonade Inc should review them carefully for any specific data types mentioned.

The breach itself reportedly took place on April 1, 2023, indicating a significant period between the incident date and the regulatory filing. As of the report date, the investigation into the breach is ongoing, meaning the full scope and impact are still being assessed.

If you receive a data breach notification from Lemonade Inc, it is advisable to follow any instructions provided by the company. This typically includes monitoring your accounts and being alert for any unusual activity. Maintaining vigilance against unsolicited communications is a general protective measure.

Consider reviewing your credit reports from the major credit bureaus (Equifax, Experian, and TransUnion) for any unauthorized accounts or suspicious activity. You are entitled to a free copy of your credit report annually. Placing a fraud alert on your credit files is another step you can take to help prevent identity theft.

Additionally, exercise caution with any emails, text messages, or phone calls claiming to be from Lemonade Inc, especially if they request personal details or login credentials. Always verify the legitimacy of such communications directly through official channels.

Questions about this case file

Where does the Lemonade Inc case file come from?: Every entry is taken from the breach report Lemonade Inc lodged with the Indiana Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Indiana data breaches

Filing source: Indiana Attorney General

Named in the Lemonade Inc breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Indiana case files