Allstate Sued for Exposing 190K New Yorkers' Driver's License Numbers

New York State is suing Allstate Insurance for poorly designed websites that exposed the personal information of nearly 190,000 New Yorkers. The vulnerability, residing in Allstate's National General unit's quote-generating websites, allowed attackers to easily obtain driver's license numbers, used subsequently for fraudulent claims. The lawsuit alleges that Allstate prioritized profit over security, failing to implement adequate safeguards and neglecting to notify affected individuals. The state is seeking penalties and an injunction to prevent future violations.