Coverage is picking up about a data breach at ALL -over 15GB?! That's a lot of data! I'm sure that's exactly what management intended when they crammed a failed operating model onto cyber! What could possibly go wrong?! When will they learn that, unlike code defects that can be fixed in the backlog, cyber risks tend to represent the equivalent of real bullets! Just the kind of thing you might want to measure twice and cut once! The CIO seems like he's ready to take risks in the name of being fast, but at some point you need to pay the piper! It also sounds like it might be internal data (employee/ agent, etc). If morale is low now, lets see how the next survey data looks! I believe Z hails from south africa.. I bet he and Elon were buds back on the playground. It's different though when you're the world's richest man, and you want to blow up a few rockets.. Not the same as getting sloppy with people's identities and their data! I'm gonna grab some popcorn!
9 replies (most recent on top)
https://www.galaxywarden.com/blog/breach/allstate-exfilsquad-2026-07
On July 26, 2026, insurance giant Allstate was formally listed on the leak site of the ransomware and extortion group ExfilSquad. The listing states that the company suffered a ransomware attack in which internal files were exfiltrated. The disclosure does not specify the exact number of people affected, though the group claims roughly 657,000 records containing significant PII were taken.
The ExfilSquad leak site entry, archived via ransomware.live, states that Allstate was hit by a ransomware operation and that attackers successfully exfiltrated internal files. The listing explicitly references 657K records that include significant personally identifiable information, recruitment and licensing details, onboarding documents, and internal employee account information. The primary disclosure does not quantify how many current or former customers, employees, or dependents are impacted, nor does it list the precise systems accessed or the ransom demand. Allstate has not yet issued a public breach notification detailing these facts.
Any more info on the potential data breach
@fk Yeah was essentially told that by a manager to not be honest to keep the bigwigs happy. Defeats the purpose of the survey
Zufli is a massive fraud and like most MBA types a vampire that jumps from company to company su-king the life blood on it. He purposed a model to try and get a massive bonus for something that is disguised as "efficiency" but is a joke. By the time it is discovered what has happened he will move onto another company. You want to see the future of allstate tech look at his tenure at cvs and paypal. He is also a big babby with a massive ego. Doesn't know a thing about tech other than buzzwords. But I guess what they teach in Harvard business school, b.s. your way to the top. Of course they do not like the results of the asks survey, makes him look bad or they pass the blame directly onto the local manager who cant address anything. If you are worth a dam in cyber or tech update your resume and leave this dumpster fire.
@ch I know that they're not anonymous, but it's still worth pointing out to everyone else. If you provide answers that Z & K do not like, you may well be asked for a chat. They may be confidential but they're definately not anonymous.
Oh no! A data breach! Congratulations! You’ve successfully reported a phishing email!!
@aq Is it common knowledge that those surveys are in no way whatsoever confidential/anonymous? I hope people are aware of that.
https://www.insurancebusinessmag.com/us/news/cyber/allstate-breach-claim-raises-questions-about-scope-of-exposure-584600.aspx
"If morale is low now, lets see how the next survey data looks!"
It'll look the same. We aren't allowed to be honest in the Allstate Asks survey. They don't want to hear about crunch, about shortcuts, about missing managers at all levels in the chain, about working practices that are leading to poor quality code (from all aspects).
They don't understand (or care) that a happier workforce produces better quality.