Valsoft Corporation Inc. d/b/a AllTrust Data Breach — Case File

From the AG filing description

Valsoft Corporation Inc., operating under the business name AllTrust, functions as a specialized financial and administrative services provider, handling critical wealth management, trust administration, and asset management portfolios for clients across California. Because of the sophisticated financial operations they manage, AllTrust routinely accumulates and stores extensive volumes of highly sensitive consumer information, including financial account records, trust documents, and foundational personal identifiers required for high-value transactions and fiduciary oversight. This dense repository of financial data makes AllTrust a high-value target for malicious cyber actors seeking to exploit institutional vulnerabilities for financial gain and identity fraud. In 2025, Valsoft Corporation Inc. d/b/a AllTrust formally reported a significant data security incident to the California Attorney General, alerting regulators and affected individuals to an unauthorized compromise of its digital infrastructure. While investigations into incidents of this nature frequently point toward sophisticated network intrusions, unauthorized database access, or vulnerabilities within third-party vendor integrations, the fundamental reality remains that external actors breached the digital perimeter safeguarding confidential consumer files. For a financial and trust administration entity, such an event typically means that internal network defenses failed to detect or halt unauthorized data exfiltration in a timely manner, leaving sensitive institutional repositories exposed for an undetermined duration. The data compromised during the AllTrust security incident encompasses a dangerous combination of core identifying and financial information. Exposed records frequently feature full legal names, dates of birth, Social Security numbers, banking and financial account numbers, routing details, and proprietary trust or investment portfolio identifiers. The exposure of this specific data matrix creates immediate, severe risks for affected consumers; a compromised Social Security number combined with financial account details provides malicious actors with the precise toolkit needed to execute seamless financial account takeovers, unauthorized wire transfers, fraudulent loan applications, and complex identity theft schemes that can take years for victims to fully remediate. Under California consumer protection laws, including the California Confidentiality of Medical Information Act where applicable, and broader standards under the FTC Act and state common law, entities like Valsoft Corporation Inc. d/b/a AllTrust have a strict legal duty to implement and maintain reasonable security procedures and practices appropriate to the nature of the personal information they hold. This obligation requires robust data encryption, multi-factor authentication, proactive network monitoring, and rigorous vendor risk management. The occurrence of a widespread data breach strongly indicates a potential failure of these foundational legal obligations, suggesting that structural safeguards and technical controls were inadequate to prevent unauthorized access. Receiving a formal data breach notification letter from Valsoft Corporation Inc. d/b/a AllTrust is a direct legal admission that your private information was compromised due to inadequate corporate data security. Under modern legal standards, the receipt of this notice establishes the concrete injury and legal standing required to participate in a class action lawsuit against the company. Affected individuals do not need to wait until financial fraud actually occurs to seek legal recourse, as the increased risk of identity theft and the loss of privacy constitute actionable harm. Our firm is actively investigating potential class action claims on behalf of impacted consumers, operating strictly on a contingency fee basis, meaning there are never any out-of-pocket costs or fees unless we successfully recover compensation for you.