Feed: Slashdot
Feed Link: https://slashdot.org/
---

Title: Insurance Firm Lemonade Says API Glitch Exposed Some Driver's License
Numbers

Link: https://yro.slashdot.org/story/25/04/15/20252...

An anonymous reader quotes a report from SecurityWeek: Insurance firm
Lemonade is notifying roughly 190,000 individuals that their driver's license
numbers were likely exposed due to a technical glitch. Copies of the
notification letter that were submitted to regulators in several states show
that the incident involved an online application that enables individuals to
obtain car insurance quotes and purchase policies. According to the company,
a vulnerability in the car insurance quote flow resulted in the exposure of
certain driver's license numbers for identifiable individuals. The
vulnerability has been addressed, Lemonade says. Between April 2023 and
September 2024, the platform transmitted the information unencrypted, which
the company says allowed driver's license numbers to be accessed without
authorization. "We have no evidence to suggest that your driver's license
number has been misused but we are providing this notice as a precaution to
inform potentially affected individuals and share some steps you can take to
help protect yourself," the company's notification letter reads. The insurer
is providing the impacted individuals with 12 months of free credit
monitoring and identity protection services.

Read more of this story at Slashdot.

---
VRSS v2.1.180528