Allstate Insurance sued for delivering personal info on a platter, in plaintext, to anyone who went looking for it

New York State has sued Allstate/National General after insecure quote websites and an agent portal exposed drivers' license numbers and other personal data in plain text; attackers harvested at least 12,000 DLNs from the consumer quote site and another ~187,000 records via the agent tool, leading to fraudulent claims and alleged violations for failing to detect the abuse promptly or notify affected individuals.