Key developments
Lemonade agrees to $10.5 million breach settlement
Lemonade Inc. and Lemonade Insurance Agency LLC agreed to pay $10.5 million to resolve class claims that unauthorized parties could access personal information through its online insurance quote system. The alleged exposure window ran from April 2023 through Sept. 18, 2024 and included driver’s license numbers. The settlement class is estimated at about 190,000 U.S. people, including recipients of breach notices in April or June 2025, and members may seek up to $10,000 in documented losses plus pro rata cash relief and three years of credit monitoring and identity theft insurance.
Why it matters
It puts a large dollar figure on a consumer data exposure and defines concrete remediation for a broad affected class.
Sources & driving stories
CLAIM DEPOT · Danielle Toth
Claim Depot coverageFox Rothschild hit with ransomware breach suit
Law360 reports that a proposed class action filed in Pennsylvania federal court targets Fox Rothschild LLP for allegedly failing to protect highly sensitive and confidential personal data. The complaint says the data was exposed in a ransomware-related incident involving a prominent ransomware group, and it ties the alleged breach to an event last month. The case seeks remedies for affected individuals and centers on security and data-protection failures.
Why it matters
The filing shows ransomware-related privacy litigation reaching a major law firm.
Sources & driving stories
LAW360 · Allison Grande
Law360 coverageWorth noting
WORTH NOTING
New York passes personnel-records bill
S3460 would require employers to provide current and former employees copies of their personnel records.
WORTH NOTING
UK employer privacy rules expand
The Data (Use and Access) Act 2025 now covers key employer-relevant provisions, with additional measures scheduled for June 2026.
Still unclear
OPEN QUESTION
Will Lemonade settlement get final approval?
Approval and claims volume will determine how the $10.5 million fund is ultimately distributed.
OPEN QUESTION
What is the full scope of Fox Rothschild exposure?
The complaint alleges a ransomware-related incident, but the number of affected people and specific records have not yet been fully detailed.
