Regulatory updates
New York Attorney General sues Allstate
March 15, 2025
New York Attorney General Letitia James is suing Allstate and its subsidiary, National General, over two data breaches (2020 & 2021) that exposed the personal information of nearly 200,000 individuals. The lawsuit claims the company failed to secure consumer data and violated New York’s SHIELD Act by not promptly notifying affected individuals. The Attorney General seeks civil penalties of $5,000 per violation. Allstate asserts that it addressed the vulnerabilities and took corrective action, including notifying regulators and offering credit monitoring.