Valsoft Corporation Inc. d/b/a AllTrust Data Breach — Class Action Review

Valsoft Corporation Inc., operating under the assumed name AllTrust, functions within the financial services, insurance, and trust administration sector, managing complex financial portfolios, asset management accounts, and administrative trust services. Because of the critical financial and fiduciary services they provide, AllTrust routinely collects, processes, and stores an extensive volume of highly sensitive personal identifiable information (PII) and financial records for its clients, beneficiaries, and stakeholders. This repository of high-value data makes the company an attractive target for malicious cyber actors seeking to exploit vulnerabilities for financial gain.

In 2025, Valsoft Corporation Inc. d/b/a AllTrust reported a significant data security incident to the Maryland Attorney General. While the full scope and vector of the attack remain under investigation, breaches within the financial and trust administration sectors typically involve unauthorized third-party intrusions, compromised enterprise networks, or sophisticated ransomware deployments targeting legacy or inadequately secured databases. These types of security incidents often allow unauthorized actors to dwell within corporate networks undetected for extended periods, granting them ample opportunity to exfiltrate confidential consumer and corporate files.

The exposure resulting from this incident encompasses a dangerous combination of sensitive records, including full names, dates of birth, Social Security numbers, banking and investment account details, routing numbers, and proprietary financial documentation. The compromise of this specific data category creates immediate and severe risks for affected individuals. Social Security numbers and financial account details combined with identity markers can be leveraged by bad actors to commit identity theft, open fraudulent lines of credit, execute unauthorized wire transfers, and perpetrate tax fraud. Unlike transient data like email addresses, foundational identifiers cannot be easily reset or replaced once compromised, leaving victims vulnerable to long-term financial exploitation.

As a financial and fiduciary services entity, Valsoft Corporation Inc. d/b/a AllTrust is bound by rigorous statutory and common law obligations to safeguard consumer information. Under the Gramm-Leach-Bliley Act (GLBA), state consumer protection statutes, and prevailing industry standards, financial institutions must implement robust administrative, technical, and physical safeguards—such as multi-factor authentication, advanced endpoint detection, network segmentation, and regular vulnerability assessments—to protect sensitive client data. The occurrence of a widespread data breach strongly suggests a potential failure or negligence in maintaining these mandated security controls, raising serious questions about the adequacy of the company's data protection posture.

Receiving a formal data breach notification letter from Valsoft Corporation Inc. d/b/a AllTrust serves as official legal confirmation that your private financial and personal information was compromised due to corporate security failures. Under modern jurisprudence, the receipt of such a notice often establishes the requisite legal standing to participate in a class action lawsuit against the responsible organization. Affected individuals do not need to wait until they experience direct financial loss or identity theft to take legal action; the increased risk of future harm and the costs associated with mitigating that risk are actionable injuries. Our class action law firm is investigating potential claims on behalf of all impacted individuals on a contingency fee basis, meaning there are never any out-of-pocket costs or attorney fees unless we successfully recover compensation for you.