Lemonade, Inc. Investigation

/by

Insurer Lemonade, Inc. (“Lemonade”) is the subject of a new series of lawsuits over its convenience-focused online quoting tool that disclosed drivers’ license numbers to unauthorized third parties.

Background
Lemonade, the newest major insurance company, included a tool on its public website that was designed to make it easier for individuals to obtain quotes for insurance policies by auto-populating certain information on behalf of the individual. When the individual entered only basic information, Lemonade’s website would automatically run a search for additional data obtained from other sources, and populate that information on Lemonade’s website to complete the quote. This tool was designed to make it easier for applicants to complete quotes and buy policies without having to dig out their driver’s license card or other documents.

What Happened

Cybercriminals identified Lemonade’s website as a way to obtain the drivers’ license numbers for many individuals in order to engage in various crimes. By entering a victim’s basic information, which might be publicly available online (e.g. on social media), Lemonade would disclose the person’s driver’s license number. Approximately 190,000 drivers’ license numbers were exposed to these third parties over a period of 17 months without any concrete action by Lemonade to identify or stop the threat. It is still unclear if the company has fixed the vulnerability.

Lemonade Insurance

Users Face New Harms

Victims whose drivers’ license numbers were obtained through Lemonade’s website face many kinds of threats. Because our drivers’ license numbers are so confidential and personal, criminals are able to use them to commit more severe forms of fraud. With access to these drivers’ license numbers, criminals can solicit loans, access retirement accounts, charge to the victims’ credit cards, and more. Without the drivers’ license numbers, criminals would have far less access to the victims’ virtual and financial lives. Besides the obvious fraud that can result from this disclosure, victims also face a heightened risk of future fraud as well as the loss of value in that information, lost time spent trying to stop existing fraud, and lost time preventing future injuries. Victims may spend years, even their entire lives, spending extra time and money monitoring their credit and other financial accounts.

Victims may be able to seek damages from Lemonade including compensation for actual losses, statutory damages, and injunctive relief. If you believe your information has been disclosed by Lemonade and experienced any of the injuries described above, submit the form below to learn more about what you can do.

Your Information

Name(Required)
Email Address(Required)
Were/are you a customer or applicant for services from Lemonade Inc.?(Required)
Did you receive a notice from Lemonade Inc. indicating that your information may have been disclosed?(Required)
Do you believe you have experienced any of the following harms as a result of Lemonade Inc. disclosing your information?
Select all that apply
This field is for validation purposes and should be left unchanged.

Lockridge Grindal Nauen PLLP (“LGN”) purchases advertisements on search engines, social media platforms, and other websites. Providing information to LGN, whether in response to an advertisement or otherwise, does not create an attorney-client relationship between you and LGN.  We will not agree to represent you until we (1) have determined that we do not have any conflicts that would preclude us from representing you; (2) have thoroughly evaluated your matter; and (3) have confirmed we are authorized to engage in the practice of law in the relevant jurisdiction.  Nothing in LGN’s advertising or its websites is intended to suggest that its services are of a greater quality than the services that may be provided by other lawyers nor are past results a promise or suggestion of future results.