$10.5M Lemonade Driver’s License Data Breach Settlement, Are You Eligible to Claim?

The Lemonade Data Breach Settlement is a proposed $10,500,000 class action settlement where over 190,000 individuals whose driver’s license numbers were exposed through Lemonade’s online auto insurance quote platform between April 2023 and September 2024 may be eligible to receive a cash payment by filing a claim. On April 16, 2026, Lemonade agreed to the $10.5 million settlement in a proposed class action filed in the U.S. District Court for the Southern District of New York. The settlement is subject to preliminary court approval — no claim form is open yet, and the claim deadline is TBD pending the court’s preliminary approval order.

Quick Facts: In re Lemonade, Inc. Data Disclosure Litigation — S.D.N.Y.

Field	Detail
Settlement Amount	$10,500,000
Claim Deadline	TBD — claim form not yet released pending court preliminary approval
Who Qualifies	Individuals whose driver’s license numbers were exposed via Lemonade’s “Online Flow” auto insurance quote platform between April 2023 and September 2024
Payout Per Person	TBD — determined by the number of valid claims filed after final court approval
Proof Required	TBD — claim form not yet released by administrator
Settlement Status	Proposed — Preliminary Approval Motion Filed April 16, 2026
Administrator	TBD — pending court appointment after preliminary approval
Official Website	TBD — pending court preliminary approval
Co-Lead Class Counsel	Berger Montague (Mark DeSanto)
Last Updated	April 23, 2026

Current Status & What Happens Next

• A preliminary approval motion was filed on April 16, 2026, in the U.S. District Court for the Southern District of New York. The court must now schedule and hold a preliminary approval hearing before a claim form opens.
• Once the court grants preliminary approval, a settlement administrator will be appointed, an official settlement website will go live, and class members will receive mailed notices with claim filing instructions. The claim deadline will be set at that time.
• Berger Montague shareholder Mark DeSanto has been appointed Co-Lead Class Counsel in the nationwide class action alleging Lemonade disclosed approximately 200,000 individuals’ driver’s license numbers in violation of the federal Driver’s Privacy Protection Act.

What Is the Lemonade Data Breach Lawsuit About? In re Lemonade, Inc. Data Disclosure Litigation — S.D.N.Y. (2025)

Lemonade discovered a vulnerability in its “Online Flow” system on March 14, 2025, which may have allowed unauthorized access to driver’s license numbers. The exposure occurred between April 2023 and September 2024. Lemonade disclosed the incident to the U.S. Securities and Exchange Commission on April 9, 2025, revealing that the technical flaw caused driver’s license numbers to be transmitted in unencrypted form, without the usual security protections in place.

Here is how the breach worked technically: when a user entered their name and address into Lemonade’s auto insurance quote platform, the system automatically retrieved that person’s driver’s license number from a third-party vendor. A vulnerability in the platform allowed scammers to exploit a lack of verification processes when accessing those driver’s license numbers, effectively turning the website into a tool for identity theft. Users could retrieve sensitive information by simply entering names and addresses, and the system failed to detect automated bots conducting bulk data extraction.

The complaint accuses Lemonade of negligence and of violating the federal Driver’s Privacy Protection Act (DPPA), New York business law, and FTC data security guidelines. The DPPA is a federal statute that prohibits obtaining or disclosing personal information from a motor vehicle record — including driver’s license numbers — for unauthorized purposes. Violations of the DPPA carry statutory damages of $2,500 per person, which is why the proposed class of over 190,000 people represents significant potential liability for Lemonade.

Lemonade sent letters to individuals impacted by the data disclosure beginning April 10, 2025 — meaning the company allowed the disclosure to continue for 17 months and failed to inform affected individuals of the breach for nearly two years. The two-year delay between the breach starting (April 2023) and consumers being notified (April 2025) is a central element of the plaintiffs’ negligence theory. This is not Lemonade’s first data privacy settlement — in May 2024, Lemonade reached a nearly $5 million settlement in a separate case that accused the company of illegally disclosing life insurance applicants’ personal and health-related information to third parties such as TikTok, Facebook, and Snapchat. 

Who Is Eligible for the Lemonade Settlement?

• You may qualify if you received a data breach notice letter from Lemonade around April 2025 stating that your driver’s license number may have been exposed.
• You may qualify if you applied for or received a quote for auto insurance through Lemonade’s online platform — including its “Online Flow” quoting system — at any point between April 2023 and September 2024.
• You may qualify if your driver’s license number was accessible through Lemonade’s platform during that period, even if you did not complete a policy purchase.
• You may qualify if you experienced identity theft, fraud, or unauthorized financial activity after the breach period — the lead plaintiff, Arizona resident Leslie Rich, alleged he became a victim of fraud and identity theft, with criminals applying for multiple auto loans in his name and making fraudulent trades on his Fidelity retirement account after obtaining his information through Lemonade’s platform.
• You may qualify even if you never applied for insurance through Lemonade, as the proposed class includes individuals who never completed an application — indicating a broader impact beyond current Lemonade customers.
• You may qualify if you are a resident of any U.S. state. The breach was reported to the Texas, South Carolina, California, Iowa, Washington, and Massachusetts state Attorneys General offices starting April 11, 2025, but the proposed class is nationwide.

How Much Can You Receive from the Lemonade Settlement?

Individual payout amounts are TBD — the claim form has not been released and final amounts depend on the total number of valid claims filed. With $10,500,000 in the settlement fund and a proposed class of over 190,000 individuals, the per-person baseline before fees and costs could be significant.

For comparison, data breach settlements involving driver’s license numbers and DPPA violations typically offer:

• Flat-rate payments with no documentation required (amount TBD for this case)
• Documented loss payments for class members who can show out-of-pocket losses tied to the breach — such as costs for credit monitoring, identity theft remediation, or actual financial fraud losses like the unauthorized auto loans and fraudulent investment trades alleged by the lead plaintiff
• Lost time compensation for hours spent dealing with the breach’s consequences

The exact payout tiers — and whether Lemonade will provide credit monitoring or identity protection services as part of the settlement — are TBD pending release of the formal settlement agreement and claim form after preliminary approval.

How to File a Lemonade Settlement Claim

No claim form is open yet. The preliminary approval motion was filed April 16, 2026. Here is what to do right now to prepare:

Step 1 — Locate your Lemonade data breach notice letter. If you received a letter from Lemonade around April 2025 disclosing that your driver’s license number may have been exposed, save it — it establishes your class membership and may include a unique Class Member ID needed to file.

Step 2 — Gather documentation of any out-of-pocket losses tied to the breach. This includes costs for credit monitoring, fees paid to dispute fraudulent accounts, bank statements showing unauthorized transactions, or documentation of time spent resolving identity theft issues.

Step 3 — Monitor the official settlement website once it is posted by the court-appointed administrator. The URL will be published after the court grants preliminary approval — check the PACER docket for In re Lemonade, Inc. Data Disclosure Litigation in the Southern District of New York for updates.

Step 4 — Once the claim form opens, visit the official settlement website and complete the online form or download and mail a paper form. Have your breach notice letter and Class Member ID available.

Step 5 — Select your payout tier. If you suffered documented identity theft or fraud losses, gather supporting documentation — higher tiers typically require evidence but pay significantly more than flat-rate options.

Step 6 — Submit your claim before the deadline and save your confirmation number. Payments are typically distributed within 60–90 days after the court grants final approval and any appeal period expires.

Estimated time to complete once the form opens: 10–15 minutes for standard claims; longer if submitting documented loss evidence.

Important Deadlines & Dates

Milestone	Date
Breach Begins — Driver’s Licenses Exposed	April 2023
Breach Ends — Vulnerability Active Until	September 2024
Lemonade Discovers Vulnerability	March 14, 2025
Lemonade SEC Disclosure Filed	April 9, 2025
Breach Notification Letters Mailed to Affected Individuals	April 10, 2025
Class Action Filed — S.D.N.Y.	June 2025
Preliminary Approval Motion Filed	April 16, 2026
Preliminary Approval Hearing	TBD — pending court scheduling
Claim Form Opens	TBD — after preliminary court approval
Claim Filing Deadline	TBD — set after preliminary approval, typically 60–90 days after notice
Final Approval Hearing	TBD — pending preliminary approval
Expected Payment Date	TBD — typically 60–90 days after final approval

Frequently Asked Questions

Do I need a lawyer to file a Lemonade settlement claim?

 No. Once the claim form opens after court preliminary approval, eligible class members can file directly online or by mail at no cost. Co-Lead Class Counsel from Berger Montague handles the litigation on behalf of the class — no individual attorney is needed to participate and collect your payment.

Is this Lemonade settlement legitimate?

 Yes. On April 16, 2026, Lemonade agreed to the $10.5 million settlement, and a preliminary approval motion was filed in the U.S. District Court for the Southern District of New York. The case is titled In re Lemonade, Inc. Data Disclosure Litigation and is verifiable on PACER. Law360 confirmed the settlement filing on April 16, 2026.

When will I receive my payment? 

No payment date is confirmed. The court must first grant preliminary approval, then notice must be sent, the claim deadline must pass, and the court must grant final approval. For a settlement of this size in the Southern District of New York, that process typically takes six to twelve months from the preliminary approval motion. Monitor the official settlement website — which will go live after preliminary approval — for the most current payment timeline.

What if I missed the claim deadline? 

The claim deadline has not been set yet — the court has not granted preliminary approval as of April 23, 2026. No one has missed any deadline. Watch for mailed notice letters and the official settlement website for the deadline once it is announced.

Will this settlement payment affect my taxes? 

Possibly. The IRS generally treats data breach settlement payments differently depending on what they compensate for. Payments for documented out-of-pocket losses — such as fraud costs or credit monitoring fees — may be treated differently than flat-rate payments. Consult a tax professional once payment amounts and tiers are confirmed.

What is the Driver’s Privacy Protection Act and why does it matter here? 

The Driver’s Privacy Protection Act (DPPA) is a federal law that prohibits obtaining or using personal information from motor vehicle records — including driver’s license numbers — without a permissible purpose. The complaint accuses Lemonade of violating the DPPA by allowing cybercriminals to harvest approximately 190,000 individuals’ driver’s license numbers through its online insurance quote platform. DPPA violations carry statutory damages of $2,500 per person — a figure that makes the proposed class of 190,000 a significant financial exposure for Lemonade.

I received a Lemonade notice letter in April 2025. Do I need to do anything right now?

 Save your notice letter and document any fraud or identity theft you have experienced. You do not need to take any legal action right now. Once the court approves the settlement and the claim form opens, you will receive another notice with instructions. Acting early by documenting your losses will strengthen your eventual claim — particularly if you pursue a documented loss tier above the flat-rate option.

Has Lemonade had data privacy problems before? 

Yes. In May 2024, Lemonade reached a nearly $5 million settlement in a separate case that accused the company of illegally disclosing life insurance applicants’ personal and health-related information to third parties. This current $10.5 million driver’s license settlement is the second significant data privacy settlement Lemonade has reached within two years, involving a different product line and a different type of data exposure.

Sources & References

• Law360 — Settlement filing confirmation, April 16, 2026 (primary source): https://www.law360.com/articles/2466446
• U.S. SEC EDGAR — Lemonade April 9, 2025 breach disclosure filing: https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=LMND
• PACER — U.S. District Court, Southern District of New York (In re Lemonade, Inc. Data Disclosure Litigation): https://pacer.gov

Prepared by the AllAboutLawyer.com Editorial Team and reviewed for factual accuracy against the Law360 settlement filing confirmation (April 16, 2026), the Berger Montague Co-Lead Counsel case page, the Insurance Journal original breach coverage, and Lemonade’s April 9, 2025 SEC disclosure on April 23, 2026. Last Updated: April 23, 2026

Disclaimer: This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.