The law firm said a ransomware group claimed responsibility for a cyberattack involving Allstate, alleging access to more than 657,000 records and 15.1 GB of sensitive data.
Edelson Lechtzin LLP said it is investigating data privacy claims tied to an Allstate data breach that the firm said was learned of on or about July 26, 2026. The law firm said cybersecurity platforms reported that ransomware group ExfilSquad claimed responsibility for a cyberattack involving Allstate Corporation, alleging access to more than 657,000 records and 15.1 GB of sensitive data. The release said certain personal information may have been compromised and warned that individuals who received a data breach notification from Allstate could face heightened risks of identity theft and fraud. Edelson Lechtzin said it is evaluating a potential class action on behalf of affected individuals and urged people to monitor account statements and credit reports, preserve breach-related communications, and consider fraud alerts and credit monitoring.