Where does the Lemonade, Inc. case file come from?

Every entry is taken from the breach report Lemonade, Inc. lodged with the Oregon Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Lemonade, Inc. Data Breach

This file collects the dated facts on record for the Lemonade, Inc. incident. The state report is dated April 11, 2025. The incident itself is dated April 1, 2023.

Timeline

741 days separate the incident date from the date it was reported.

April 1, 2023Incident dateWhen the filing says the breach took place.
April 11, 2025Report filed in OregonDate the notice was lodged with the Oregon Attorney General.

Case facts

Filing state: Oregon
Date reported: April 11, 2025
Incident date: April 1, 2023
Receiving office: Oregon Attorney General

Case notes

Lemonade, Inc. submitted a data breach notification to the State of Oregon, confirming an incident that may have exposed personal information. This filing, dated April 11, 2025, relates to a data security event initially identified on April 1, 2023. Such notifications serve as a public record of cybersecurity incidents affecting residents.

The specific nature of the data breach at Lemonade, Inc. has not been detailed in the public filing. While it is confirmed that personal information was involved, the exact categories of data are not specified in the available record. This means that individuals potentially affected should be generally vigilant about their digital footprint.

Furthermore, the official notification does not specify the number of individuals whose information may have been compromised. The scope of the incident, in terms of affected persons, remains unreported in the public filing.

The situation is currently listed as "investigating," suggesting that Lemonade, Inc. is actively working to understand the full impact and details of the breach. Further information may become available as their inquiry progresses and additional filings are made.

To protect yourself following any potential exposure of personal information, it is advisable to remain alert for any unusual account activity or unsolicited communications. Consider placing a fraud alert with credit bureaus and regularly reviewing financial and other relevant statements for discrepancies. Regularly update strong, unique passwords for your online accounts and enable multi-factor authentication wherever possible.

Questions about this case file

Where does the Lemonade, Inc. case file come from?: Every entry is taken from the breach report Lemonade, Inc. lodged with the Oregon Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Oregon data breaches

Filing source: Oregon Attorney General

Named in the Lemonade, Inc. breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Oregon case files