Allstate

Allstate was compromised in a ransomware attack attributed to ExfilSquad in July 2026. The organization, operating in the Financial Services sector in United States, was added to the group's data leak site as part of an extortion campaign.

ExfilSquad operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Revenue: $67B DATA SUMMARY: 657K~ records containing: significant PII, recruitment and licensing information, onboarding data, and internal employee account information.