Climate
Privacy
Bob Dylan
Drones
Data Centers
AI Governance
2026 Maine Senate Race
Key developments
Lemonade agrees to $10.5 million breach settlement
Lemonade Inc. and Lemonade Insurance Agency LLC agreed to pay $10.5 million to resolve a class action over alleged unauthorized access to personal information through the company's online insurance quote system. The alleged exposure window ran from April 2023 through Sept. 18, 2024 and included driver’s license numbers; the settlement class covers about 190,000 U.S. residents who were compromised, including people notified in April or June 2025.
Why it matters
It resolves a large privacy claim involving sensitive identity data and sets payout and monitoring terms for a sizable affected class.
Sources & driving stories
CLAIM DEPOT · Danielle Toth
Claim Depot coverageFox Rothschild faces ransomware-related privacy suit
A proposed class action filed in Pennsylvania federal court targets Fox Rothschild LLP over an alleged failure to protect highly sensitive personal data. The complaint says the exposure stemmed from a ransomware-related incident involving a prominent ransomware group and ties the alleged breach to an event that occurred last month.
Why it matters
It adds another law-firm breach dispute to the privacy docket and could test claims over safeguards for highly confidential client and employee information.
Sources & driving stories
LAW360 · Allison Grande
Law360 coverageWorth noting
WORTH NOTING
Employee privacy laws advance in multiple jurisdictions
A JD Supra roundup highlights new or evolving rules in New York, the UK, Illinois, Maine, Connecticut, and Delaware affecting employer access to personnel records and online accounts.
Still unclear
OPEN QUESTION
How broad is the Lemonade claims fallout?
The settlement covers about 190,000 people, but the eventual claims rate and the balance between documented-loss payments and pro rata checks will determine its real impact.
OPEN QUESTION
Will the Fox Rothschild case identify the breach scope?
The complaint points to a ransomware-linked incident, but the key open questions are what data was exposed, how many people were affected, and whether the firm can defeat class claims.