Edelson Lechtzin LLP has initiated an investigation into potential class action claims stemming from a significant data breach at Allstate Corporation. The law firm is evaluating data privacy claims on behalf of individuals whose sensitive personal information may have been compromised during the cyberattack. This legal scrutiny follows reports that the ransomware group ExfilSquad accessed a substantial volume of customer data, raising concerns about identity theft and fraud risks for affected policyholders.

The breach was identified by Allstate on or about July 26, 2026. Cybersecurity platforms subsequently reported that ExfilSquad claimed responsibility for the attack, alleging access to more than 657,000 records and 15.1 GB of sensitive data. While the specific types of personal information exposed were not detailed in the initial disclosures, the scale of the data exfiltration suggests a broad impact across Allstate’s customer base.

Scope of Exposure

The potential compromise of personal data places individuals who received breach notifications from Allstate at an increased risk of identity theft and financial fraud. Edelson Lechtzin LLP stated that it will evaluate the rights and potential claims of affected individuals at no cost. The firm’s investigation aims to determine the extent of liability and pursue appropriate legal remedies for those impacted by the security failure.

Recommended Protective Steps

Affected individuals are advised to take immediate protective measures to mitigate potential harm. Recommended actions include reviewing account statements and credit reports regularly, remaining vigilant for suspicious activity, and confirming whether their specific information was involved in the incident. Individuals should also preserve any letters or emails received from Allstate regarding the breach.

Additionally, placing fraud alerts and enrolling in credit monitoring services are suggested steps to safeguard against unauthorized use of personal data. Edelson Lechtzin LLP emphasized that preserving documentation related to the breach is critical for any potential legal claims.

What the Numbers Show

The exposure of more than 657,000 records represents a material security incident for Allstate Corporation, a leading U.S. provider of auto, home, and life insurance. The volume of data accessed—15.1 GB—indicates a targeted and substantial extraction effort by the ransomware group ExfilSquad. For investors and stakeholders, this breach highlights ongoing cybersecurity risks in the insurance sector, where large volumes of sensitive personal and financial data are routinely processed. The initiation of a class action investigation signals potential future litigation costs and reputational damage, which could impact Allstate’s operational focus and financial outlook in the near term.

The Allstate Corporation reported estimated catastrophe losses of $563 million for June 2026, contributing to a total of $1.72 billion for the second quarter. The after-tax impact for June was $445 million, while the second-quarter after-tax losses amounted to $1.36 billion. These figures reflect the financial strain of severe weather events and natural disasters during the period.

Catastrophe Loss Breakdown

The insurer disclosed that pre-tax catastrophe losses for June alone amounted to $563 million. These losses contributed to the aggregate second-quarter figure, highlighting the frequency and severity of weather-related claims during the three-month period.

The data was submitted via a regulatory filing, providing transparency regarding the financial impact of recent catastrophic events on the company's underwriting results.