Allstate, the US insurance giant, is being sued by New York's Attorney General for allegedly losing sensitive customer data and not notifying the victims.
The lawsuit claims that Allstate's lax security practices resulted in two data breaches, one in 2020 and one in 2021, which were not reported until the filing of the lawsuit.
The first breach impacted 12,000 individuals, and the second breach affected an additional 187,000 customers after Allstate acquired National General in January 2021.
New York's Attorney General seeks civil fines of $5,000 per violation, plus other remedies, while Allstate denies any wrongdoing and states they promptly addressed the incidents.