New York state sued Allstate on Monday, accusing the insurer of failing to report a data breach that exposed drivers' license numbers.