Allstate sued for not reporting data breach of 165,000 New Yorkers


New York state sued Allstate on Monday, accusing the insurer’s National General unit of failing to report a data breach that exposed drivers’ license numbers, and not developing reasonable safeguards to protect policyholders’ private information.

The lawsuit by New York Attorney General Letitia James was filed in a state court in Manhattan, and seeks civil fines. Allstate did not immediately respond to a request for comment.

Read more…
Source: USA TODAY


Sign up for our Newsletter


Related:

  • OWASP Foundation reveals data breach following Wiki web server issue

    April 2, 2024

    The Open Worldwide Application Security Project (OWASP) suffered a data breach in late February 2024 resulting in the exposure of sensitive data belonging to some of its members. In an announcement published on the OWASP website, Executive Director Andrew van der Stock confirmed the breach and explained that it happened due to a misconfiguration of an ...

  • Prudential Financial February incident exposed data of nearly 37K customers

    April 2, 2024

    Prudential Financial disclosed that 36,545 individuals had personal information stolen in an early February breach that was claimed by ALPHV/BlackCat, the group also responsible for the Change Healthcare ransomware attack. In a letter to consumers March 29, the large insurance company said the stolen personal data includes names, addresses, driver’s license numbers, and non-driver identification card ...

  • Top yacht retailer MarineMax says cyberattack led to major online data breach

    April 2, 2024

    MarineMax has confirmed suffering a cyberattack, thought to be ransomware, in which threat actors stole sensitive customer information. In an 8-K form, filed with the Securities and Exchange Commission (SEC) on April 1, the company, one of the leading yacht sellers worldwide, said a third party “gained unauthorized access to portions of our information environment.” Read more… Source: ...

  • Google agrees to wipe browsing data to put consumer privacy lawsuit to rest

    April 1, 2024

    Google will destroy a large cache of consumer data to settle a lawsuit that claimed the Chrome web search engine was tracking incognito users. The settlement, which is valued between $5 billion and $7.8 billion, was hashed out in Oakland, California, federal court, Reuters reported. The lawsuit began in 2020, spanning over 136 million consumers using ...

  • AT&T data breach: Millions of customers’ data found on dark web

    March 30, 2024

    AT&T announced on Saturday it is investigating a data breach involving the personal information of more than 70 million current and former customers leaked on the dark web. According to information about the breach on the company’s website, 7.6 million current account holders and 65.4 million former account holders have been impacted. An AT&T press release ...

  • HPSCI: Bill Seeks to Expand Surveillance Powers to Combat International Drug Trafficking

    March 30, 2024

    In a significant move on Capitol Hill, Representatives Chrissy Houlahan (D-PA) and Dan Crenshaw (R-TX), both serving on the House Permanent Select Committee on Intelligence, this week introduced a groundbreaking bipartisan bill aimed at bolstering the United States’ efforts against international drug trafficking networks. The Enhancing Intelligence Collection on Foreign Drug Traffickers Act of 2024 proposes ...