You can activate the settlement's free credit monitoring only after the court grants final approval of the deal — not when you file a claim, and not at the claim deadline. Enrollment uses a unique "CMIS" activation code printed on your mailed notice, and the service goes live once final approval is entered, per the settlement notice reported by CNBC Select. The final approval hearing that unlocks activation was scheduled for September 10, 2026, according to the official settlement site run by Kroll. Until the court signs off, the code on your notice cannot be used, even though your eligibility for the benefit is already fixed.
Official resource:
- Explore the official data from Bergermontague — Use this primary source to review the underlying data.
Table of Contents
- What the Lemonade breach actually exposed
- When activation opens, and why the date matters
- How to activate your credit monitoring
- The cash side, and how it differs from monitoring
- Avoiding scams around the settlement
- Frequently Asked Questions
What the Lemonade breach actually exposed
lemonade Insurance Agency sells policies online, including a car-insurance quote tool. A third-party vendor's software auto-populated driver's license numbers on that quote platform, exposing the license numbers of roughly 190,000 people between April 2023 and September 18, 2024, per the Kroll settlement site.
Lemonade identified the exposure around March 14, 2025, and disclosed it to state attorneys general — including Texas, South Carolina, and California — later that year, according to SecurityWeek's report on the API glitch. A driver's license number is a persistent identifier. Unlike a card number, you cannot easily reissue it, which is why credit monitoring is the core non-cash remedy here.
When activation opens, and why the date matters
credit monitoring becomes available only after final approval — the point at which the court confirms the settlement is fair and binding. The hearing for that was set for September 10, 2026, per the Kroll settlement site. This is a common source of confusion. The claim deadline and the activation date are different events, and neither triggers the other.
You do not activate monitoring by filing; you activate it after the judge approves the deal. Note the timing overlap. Cash claims had to be submitted online or postmarked by September 8, 2026, two days before the approval hearing, according to the Kroll settlement site. So the window to claim cash closed before the monitoring switch could flip.
How to activate your credit monitoring
Activation runs off the CMIS code printed on your individual mailed notice. There is no way to activate without that code, and the class administrator, not Lemonade, controls enrollment. The benefit itself is broad: three years of three-bureau credit monitoring and identity protection, including up to $1,000,000 in identity-theft insurance, and it is available to every class member whether or not they filed a claim, per CNBC Select.
- Keep the mailed notice. The CMIS activation code is printed on it and is unique to you.
- Wait for final approval. The service does not turn on until the court enters approval after the September 10, 2026 hearing.
- Enroll through the administrator only, using the code, once activation opens.
- If you lost your notice or never received one, contact Kroll Settlement Administration at 833-447-6429.
The cash side, and how it differs from monitoring
The monitoring is one benefit; cash is a separate one with its own rules. Lemonade agreed to a non-reversionary $10,500,000 fund — meaning unclaimed money does not revert to the company — while denying wrongdoing, per the Kroll settlement site. Claimants could seek up to $10,000 for documented out-of-pocket losses incurred on or after April 2023, or take a pro rata cash payment estimated at roughly $55, according to CNBC Select. The out-of-pocket option required documentation; the flat payment did not.
The consolidated case is *In re Lemonade, Inc. Data Disclosure Litigation*, No. 1:25-cv-04106-JHR-KHP, in the U.S. District Court for the Southern District of New York, per Berger Montague.
Avoiding scams around the settlement
Data-breach settlements attract copycat sites and phishing. Only one site is court-authorized: LemonadeDataDisclosureSettlement.com, administered by Kroll Settlement Administration LLC, reachable at 833-447-6429, per the Kroll settlement site.
Treat any message asking for full Social Security numbers, bank logins, or payment to "release" your monitoring as a red flag. The legitimate process uses the CMIS code on your own notice and does not charge you. If a communication does not route back to the official domain or the Kroll phone number, verify before acting.
Frequently Asked Questions
Do I need to file a claim to get the credit monitoring?
No. Every class member is eligible for the three years of monitoring whether or not they filed, per CNBC Select. Filing was required only for the cash payment.
Why won't my CMIS code work yet?
The code activates only after the court grants final approval. The hearing was scheduled for September 10, 2026, so codes are inactive until approval is entered.
What if I never received a notice with a code?
Contact the administrator, Kroll Settlement Administration, at 833-447-6429 to check your class membership and request your activation details.
You Might Also Like
- Does the On Q Financial Data Breach Settlement Include More Credit Monitoring?
- On Q Financial Data Breach: What Proof Is Needed for a Loss Claim Up to $5,000?
- Lemonade Privacy Breach Settlement: Can Class Members Get Monitoring Without a Cash Claim?