Skip to content
WorldBrand.AI

CNA controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile2 entries

  1. 2021

    CNA reports customer data breach following ransomware attack

    Issue disclosure

    CNA notified customers of a data breach following a ransomware attack on its systems. The breach affected 75,349 individuals, and the stolen files included personal information such as names and Social Security numbers. CNA said it found no evidence that the stolen information was viewed, retained, or shared.

    Company response

    • Remediation — CNA

      CNA will be offering 24 months of complimentary credit monitoring and fraud protection services through Experian.

    Source excerpt

    • The data breach reported by CNA affected 75,349 individuals, according to breach information filed with the office of Maine's Attorney General.
    • CNA will be offering 24 months of complimentary credit monitoring and fraud protection services through Experian.
    • CNA Financial Corporation, a leading US-based insurance company, is notifying customers of a data breach following a Phoenix CryptoLocker ransomware attack that hit its systems in March.
    Source

  2. 2021

    CNA discloses cyberattack and network disruption

    Issue disclosure

    CNA said it sustained a sophisticated cybersecurity attack on March 21, 2021. The attack caused a network disruption and affected certain systems, including corporate email; CNA said it had started an investigation and had not determined whether client or other data was affected.

    Company response

    • Investigation — CNA

      The insurance giant says that it has started an investigation immediately after learning of the attack, to determine the full scope of the incident. The investigation is ongoing and law enforcement has been alerted.

    Source excerpt

    • “On March 21, 2021, CNA determined that it sustained a sophisticated cybersecurity attack. The attack caused a network disruption and impacted certain CNA systems, including corporate email,” the company says in an incident notification on its website.
    • The insurance giant says that it has started an investigation immediately after learning of the attack, to determine the full scope of the incident. The investigation is ongoing and law enforcement has been alerted.
    Source