Allstate Data Breach Under Investigation After ExfilSquad Ransomware Attack On July 26, 2026, Allstate Corporation confirmed a data breach after the ransomware group ExfilSquad claimed responsibility for a cyberattack, alleging the theft of over 657,000 records and 15.1 GB of sensitive data. The incident was detected following reports from cybersecurity platforms, prompting an investigation by the national class action law firm Edelson Lechtzin LLP. The breach may have exposed personal information, putting affected individuals at heightened risk of identity theft and fraud. Allstate, a major U.S. provider of auto, home, and life insurance, has begun notifying impacted customers. Edelson Lechtzin LLP is evaluating potential legal action on behalf of those whose data was compromised, offering free case assessments to determine eligibility for claims. The firm specializes in data breach litigation, among other class action matters. The full scope of the breach and its long-term impact remain under review.

A lawsuit was filed against an Allstate Insurance Co. unit following a data breach that exposed sensitive information. The case was initially moved to federal court but was later sent back to state court due to the judge ruling a lack of subject matter jurisdiction. While the article does not specify the exact nature of the compromised data, such breaches typically involve personal or financial records of customers or employees, potentially leading to identity theft, fraud, or reputational harm. The incident highlights regulatory and legal challenges companies face when handling data security failures, especially in highly regulated industries like insurance. The breach likely triggered concerns over compliance with state-level data protection laws, customer trust erosion, and possible financial liabilities from lawsuits or regulatory fines.

The Washington State Office of the Attorney General reported a data breach involving Allstate Insurance Company on March 14, 2023. The breach, which occurred between January 8 and February 28, 2023, was due to unauthorized access affecting 561 individuals and potentially compromising names and financial information.