Insurance
Home›Insurance›Industry & Deals›Allstate ransomware claim targets more than customer d…
Allstate ransomware claim targets more than customer data
The ransomware group said it accessed over 657,000 records and 15.1 gigabytes, with claims that employee related recruitment, licensing and onboarding data were included.
An investigation has been launched into a reported data breach involving Allstate Corporation, a major US provider of auto, home and life insurance, after a ransomware group claimed it accessed data from the insurer’s systems. Insurance Business reports that the claimed dataset may extend beyond typical customer information to recruitment, licensing and onboarding records, plus internal employee account details, though Allstate has not confirmed the scope of exposure.
The cybersecurity monitoring platforms cited by Insurance Business say the group calling itself ExfilSquad posted its claim on July 26, 2026, alleging it accessed more than 657,000 records and 15.1 gigabytes of data. The listing reportedly references personally identifiable information alongside recruiting and onboarding categories, but the exact number of affected customers, employees or dependents has not been specified in public reporting.
Insurance Business notes that the claim originates from the ransomware group and has not been independently corroborated through a regulatory filing or a detailed public breach notification from Allstate, as of the time of writing. Researchers tracking ExfilSquad have urged caution in treating such leak claims until verified.
What makes the situation notable, according to Insurance Business, is that if the allegations are accurate, the data categories could include employee related information, not just customers. Allstate has not clarified whether the information pertains only to its corporate workforce or also to its network of licensed agents, and people in either category should take appropriate caution until the company confirms details.