Valsoft Corp., operating under the business name AllTrust, functions as a critical administrator and financial intermediary within the insurance and employee benefits sector. The company specializes in managing complex financial accounts, third-party administration services, and comprehensive employee benefits packages for corporate clients and their workforces. Because of its core operations, AllTrust routinely collects, processes, and stores vast quantities of highly sensitive personal and financial data necessary for administering benefit plans, processing claims, and managing insurance portfolios. This aggregation of high-value information makes AllTrust an attractive target for malicious actors seeking to exploit vulnerabilities in corporate networks to access confidential consumer records.
In 2025, Valsoft Corp. d/b/a AllTrust reported a significant security incident to the Delaware Attorney General, alerting consumers and regulatory bodies to an unauthorized compromise of its digital environment. Within the insurance and benefits administration sector, incidents of this nature typically involve sophisticated cyberattacks, such as unauthorized intrusions into centralized databases, ransomware deployment, or compromise of third-party vendor platforms. These types of breaches often exploit gaps in network perimeter defenses or legacy system vulnerabilities, allowing external threat actors to dwell undetected within corporate networks and extract large volumes of confidential files before detection occurs.
The exposure of data in an AllTrust breach poses severe risks to affected individuals due to the deeply sensitive nature of the information typically maintained by benefits and insurance administrators. Compromised data categories frequently include full names, dates of birth, Social Security numbers, banking and direct deposit details, and comprehensive insurance policy information. The unauthorized release of Social Security numbers and financial account details creates an immediate and long-lasting threat of identity theft, financial fraud, and unauthorized account takeovers. Criminals can leverage this data to open fraudulent lines of credit, intercept benefit payments, or execute targeted phishing schemes, leaving victims to deal with ruined credit scores and prolonged financial stress.
As an entity entrusted with the administration of sensitive personal and financial information, Valsoft Corp. d/b/a AllTrust was bound by stringent legal duties to safeguard its network and consumer data. These obligations derive from state consumer protection statutes, the Gramm-Leach-Bliley Act (GLBA) where applicable to financial and insurance services, and overarching common law standards of reasonable cybersecurity. Under these legal frameworks, companies are required to implement robust administrative, technical, and physical safeguards—such as multi-factor authentication, network segmentation, and regular security audits—to prevent unauthorized access. The occurrence of a data breach strongly indicates a failure to maintain these mandatory security protocols, suggesting that institutional negligence may have left consumer data exposed.
Receiving a formal data breach notification letter from Valsoft Corp. d/b/a AllTrust serves as a legal acknowledgment that an individual's private records were compromised due to corporate security shortcomings. Under modern data breach jurisprudence, the receipt of such a notice establishes legal standing to pursue a class action lawsuit against the responsible organization, even before actual financial loss or identity theft materializes. Lawsuits of this nature aim to hold companies accountable for failing to protect consumer data and to secure mandatory remedies such as credit monitoring services and financial compensation. Our firm evaluates these claims on a contingency fee basis, meaning affected individuals pay nothing out of pocket, and attorneys' fees are recovered only if a successful recovery is secured on behalf of the class.