Allstate Data Breach: Social Security Numbers Compromised

Allstate, one of the largest publicly held personal lines insurers in the United States, disclosed a data breach that exposed sensitive personal information belonging to consumers.

The breach was disclosed to the Massachusetts and Texas Attorney General on Aug. 21, 2026, with 377 Texas residents and four Massachusetts residents identified as affected.

On July 26, 2026, Allstate learned that information may have been taken without authorization. The company began to investigate the claim and learned that data was acquired on June 19, 2026.

Following the discovery, the company began an investigation with independent cybersecurity experts into the scope of the incident. On Aug. 7, 2026, it was determined that the incident compromised personal information of individuals.

The personal information exposed in the Allstate data breach included names, addresses, Social Security number information, dates of birth and other personal data.

Allstate notified affected consumers about the data breach by U.S. Mail.

Allstate's response to the breach

Affected individuals should consider taking steps to protect their information, such as remaining vigilant and reviewing accounts for any suspicious activity.