A ransomware gang says it stole 657,000 Allstate records. Allstate still won't say how many

ExfilSquad posted 15.1GB of alleged Allstate data to its leak site on July 26 — recruitment files, licensing records, employee accounts. The insurer… Aliteq Priya Nair · Software & Systems Editor

ExfilSquad claims 657,000+ records and 15.1GB of data taken from Allstate on July 26, 2026.

The alleged data spans personally identifiable information plus recruitment, licensing, onboarding and internal employee-account records — HR and agent-network data, not obviously policyholder…

Allstate has acknowledged an incident but has not independently confirmed ExfilSquad's numbers or the scope of exposure.

ExfilSquad is a relatively new group, first tracked in late 2024, running a double-extortion model — steal data, encrypt systems, then threaten to leak.

Class-action firm Edelson Lechtzin LLP opened an investigation into the exposure within days of the claim surfacing.

Every number in this story after "ExfilSquad says" is an unverified claim made by the criminals trying to extort a company. Ransomware gangs inflate stolen-data figures constantly — it's leverage,…

Leak-site claims aren't verified breach reports

Read the full story

Aliteq A ransomware gang says it stole 657,000 Allstate records. Allstate still won't say how many Read the full story on Aliteq