UnknownHigh
LEMONADE, INC.
bd_509afcd072ce27cd · schema v1 · pii pii-v1
Full breach record for LEMONADE, INC. →Lemonade, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2025-04-11. The breach occurred during 4/1/2023 - 9/18/2024. The breach was discovered on 3/14/2025. 190,000 individuals were affected. Notice was sent on 4/10/2025.
Oregon clock✓ OR AG ≤45d28 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 10 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- bd_5083a89f0a03f74eCalifornia State AGfiled 2025-04-11Verified
- bd_a20792f866647d69South Carolina State AGfiled 2025-04-11Verified
- bd_c499fb305e941f00Iowa State AGfiled 2025-04-11Verified
- bd_d8eba2a22408f594Texas State AGfiled 2025-04-11Verified
Show 5 more filings ↓Show fewer ↑up to 67d gap
- bd_16c248d2b9cddae7Indiana State AGfiled 2025-04-10(1d gap)Verified
- bd_5dcd5abd140186b2Delaware State AGfiled 2025-04-10(1d gap)Verified
- bd_9c31feadbbc4c6d6California State AGfiled 2025-06-12(62d gap)Verified
- bd_f35592cfa8a8894dDelaware State AGfiled 2025-06-13(63d gap)Verified
- bd_d0fb196ee08df9c1Texas State AGfiled 2025-06-17(67d gap)Verified
Source provenance
- Source URL
- https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 11, 2025
- Raw hash
- a3dce0122955367bdc7486f5d13335c7c733282372982da7d64197317d05b398
Reporting entity
- Name
- LEMONADE, INC.norm: lemonade
Victim entity
- Name
- LEMONADE, INC.norm: lemonade
Incident
- Discovered
- Mar 14, 2025
- Materiality determined
- —
- Notification sent
- Apr 10, 2025
- Affected individuals
- 190,000
- Data types
- —
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- OR AG ≤45d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.