HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

THE ALLSTATE CORPORATION

bd_d1bc9d96f77610f6 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jul 26, 2026

Filed

Aug 1, 2026

To disclose

—

Affected

Not disclosed

Confidence

64%

Full breach record for THE ALLSTATE CORPORATION →

Allstate learned on July 26, 2026, that information may have been taken without authorization. Investigation confirmed data was acquired on June 19, 2026. Affected data includes full name and Social Security number collected during the appointment process. Allstate engaged cybersecurity experts and notified law enforcement. Identity protection services are being offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 37 days

Jun 19, 2026

Begins

Jul 26, 2026

Discovered

Aug 1, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: THE ALLSTATE CORPORATION
norm: the allstate

Name: THE ALLSTATE CORPORATION
norm: the allstate
Industry: Financial Servicesllm

Discovered: Jul 26, 2026
Breach occurred: Jun 19, 2026
Undetected for: 37 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 14, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External

During the incident: Engaged independent cybersecurity experts
Reported the incident to law enforcement
Changes made: Providing personalized support to help protect you through Allstate Identity Protection – Essentials plan coverage
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1413-allstate/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2026
Raw hash: c2ac5237f0d1d6105e468031d521d12a27237ab215af716552a1553f921ba90d

Reporting entityTHE ALLSTATE CORPORATION

Victim entityTHE ALLSTATE CORPORATION

Incidentdiscovered Jul 26, 2026

Stated responseEngaged independent cybersecurity experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov