Allstate sued for not reporting data breach of 165,000 New Yorkers


New York state sued Allstate on Monday, accusing the insurer’s National General unit of failing to report a data breach that exposed drivers’ license numbers, and not developing reasonable safeguards to protect policyholders’ private information.

The lawsuit by New York Attorney General Letitia James was filed in a state court in Manhattan, and seeks civil fines. Allstate did not immediately respond to a request for comment.

Read more…
Source: USA TODAY


Sign up for our Newsletter


Related:

  • One million customers on alert as extortion group claims massive Brightspeed data haul

    January 7, 2026

    US fiber broadband company Brightspeed is investigating claims by the Crimson Collective extortion group that it stole sensitive data belonging to more than 1 million residential customers, including extensive personally identifiable information (PII), as well as account and billing details. Brightspeed is one of the largest fiber broadband providers in the US and serves customers across ...

  • Hacktivist deletes white supremacist websites live onstage during hacker conference

    January 5, 2026

    A hacktivist remotely wiped three white supremacist websites live onstage during their talk at a hacker conference last week, with the sites yet to return online. The pseudonymous hacker, who goes by Martha Root — dressed as Pink Ranger from the Power Rangers — deleted the servers of WhiteDate, WhiteChild, and WhiteDeal in real time ...

  • Cognizant hit with multiple US class-action lawsuits after TriZetto data breach

    January 2, 2026

    Cognizant Technology Solutions is facing a wave of class-action lawsuits in the United States after a long-running data breach at its healthcare claims processing unit, TriZetto Provider Solutions (TPS), triggered legal challenges from affected individuals. According to court filings, at least three lawsuits were filed late last month in federal courts in New Jersey and Missouri, ...

  • US removes three spyware-linked executives from sanctions list

    December 31, 2025

    Merom Harpaz, Andrea Nicola Constantino Hermes Gambazzi, and Sara Aleksandra Fayssal Hamou – three individuals who were sanctioned by the US for alleged links to commercial spyware products, have had their bans lifted recently. In a new press release published by the US Office of Foreign Assets Control (OFAC) earlier this week, it was briefly stated ...

  • In 2025, age checks started locking people out of the internet

    December 31, 2025

    If 2024 was the year lawmakers talked about online age verification, 2025 was the year they actually flipped the switch.​ In 2025, across parts of Europe and the US, age checks for certain websites (especially pornography) turned long‑running child‑protection debates into real‑world access controls. Overnight, users found entire categories of sites locked behind ID checks, platforms ...

  • U.S. DOJ: Disney Agrees to $10M Civil Penalty and Injunction for Alleged Violations of Children’s Privacy Laws

    December 30, 2025

    The Justice Department announced today that a federal court has entered a stipulated order resolving a case against Disney Worldwide Services Inc. and Disney Entertainment Operations LLC, (collectively, Disney). The Federal Trade Commission (FTC) investigated this matter, negotiated a resolution with Disney, and referred the case to the Department. Under the order, Disney will pay $10 ...