Lemonade, Inc. has notified customers that a vulnerability in its online car insurance application process, used at www.lemonade.com/car, allowed driver’s license numbers to be accessed without authorization. When someone used this online flow to get a quote or buy a policy, they entered their name, date of birth, and address, and Lemonade’s system then called a third-party vendor to retrieve that person’s driver’s license number as part of underwriting. Lemonade says a flaw in this process, discovered on March 14, 2025, likely exposed those driver’s license numbers to unauthorized access, a type of incident that falls under hacking or system intrusion. The company states it has since fixed the vulnerability and says it has no evidence the exposed information has actually been misused.
According to the letter, the exposure affected people who went through Lemonade’s Online Flow to obtain a car insurance quote or purchase a policy, with the unauthorized access spanning roughly from April 2023 through September 2024. Lemonade’s notification does not state how many people in total were affected.
What information was exposed?
- Driver’s license number
Lemonade is offering twelve months of complimentary Identity Defense credit monitoring and identity protection services. To enroll, visit app.identitydefense.com/enrollment/activate/lemonade using Activation Code <
What should you do now?
- Enroll in the free Identity Defense credit monitoring and identity protection service before the deadline listed in your letter.
- Because a driver’s license number is a government-issued identifier, watch for any unfamiliar accounts, loans, or credit inquiries opened in your name, and consider a security freeze on your credit files with Equifax, Experian, and TransUnion.
- Request and review a free copy of your credit report at annualcreditreport.com to check for unauthorized activity.
- Consider placing an initial or extended fraud alert on your credit file, which requires businesses to verify your identity before extending new credit.
- If you notice anything suspicious, such as attempts to open accounts or file for benefits using your identity, report it promptly to local law enforcement, your state attorney general, and the FTC.
- For ongoing peace of mind, consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere.
If you have questions, Lemonade can be reached at 888-802-9720, Monday through Friday, 8 a.m. to 8 p.m. Central time.