Allstate Corporation: Allstate Data Breach: Edelson Lechtzin LLP Launches Investigation Into Exposure of Personal Information

Allstate Data Breach Under Investigation After ExfilSquad Ransomware Attack

On July 26, 2026, Allstate Corporation confirmed a data breach after the ransomware group ExfilSquad claimed responsibility for a cyberattack, alleging the theft of over 657,000 records and 15.1 GB of sensitive data. The incident was detected following reports from cybersecurity platforms, prompting an investigation by the national class action law firm Edelson Lechtzin LLP.

The breach may have exposed personal information, putting affected individuals at heightened risk of identity theft and fraud. Allstate, a major U.S. provider of auto, home, and life insurance, has begun notifying impacted customers.

Edelson Lechtzin LLP is evaluating potential legal action on behalf of those whose data was compromised, offering free case assessments to determine eligibility for claims. The firm specializes in data breach litigation, among other class action matters.

The full scope of the breach and its long-term impact remain under review.

Source: https://www.globenewswire.com/news-release/2026/07/30/3335708/0/en/allstate-data-breach-edelson-lechtzin-llp-launches-investigation-into-exposure-of-personal-information.html

Allstate Corporation TPRM report: https://www.rankiteo.com/company/allstate

"id": "all1785522998",
"linkid": "allstate",
"type": "Ransomware",
"date": "7/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Insurance',
                        'location': 'U.S.',
                        'name': 'Allstate Corporation',
                        'type': 'Corporation'}],
 'customer_advisories': 'Notifying impacted customers',
 'data_breach': {'data_exfiltration': '15.1 GB of data',
                 'number_of_records_exposed': '657,000',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'Sensitive',
                 'type_of_data_compromised': 'Personal information'},
 'date_detected': '2026-07-26',
 'date_publicly_disclosed': '2026-07-26',
 'description': 'On July 26, 2026, Allstate Corporation confirmed a data '
                'breach after the ransomware group ExfilSquad claimed '
                'responsibility for a cyberattack, alleging the theft of over '
                '657,000 records and 15.1 GB of sensitive data. The breach may '
                'have exposed personal information, putting affected '
                'individuals at heightened risk of identity theft and fraud. '
                'Allstate has begun notifying impacted customers.',
 'impact': {'data_compromised': '657,000 records and 15.1 GB of sensitive data',
            'identity_theft_risk': 'Heightened risk of identity theft and '
                                   'fraud'},
 'investigation_status': 'Under investigation',
 'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'ExfilSquad'},
 'references': [{'source': 'Cybersecurity platforms'}],
 'regulatory_compliance': {'legal_actions': 'Potential legal action being '
                                            'evaluated by Edelson Lechtzin '
                                            'LLP'},
 'response': {'communication_strategy': 'Notifying impacted customers',
              'third_party_assistance': 'Edelson Lechtzin LLP'},
 'threat_actor': 'ExfilSquad',
 'title': 'Allstate Data Breach Under Investigation After ExfilSquad '
          'Ransomware Attack',
 'type': 'Ransomware'}