HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
CNA FINANCIAL CORPORATION
bd_7abcb947b9a91680 · schema v1 · pii pii-v1
Full breach record for CNA FINANCIAL CORPORATION →CNA Financial Corporation reported an external system breach (hacking) occurring between March 5, 2021, and March 21, 2021. The incident affected 75,349 individuals, including 96 Maine residents. Acquired information included names and Social Security Numbers. CNA provided 24 months of credit monitoring through Experian and a toll-free hotline.
Maine clockDiscovered Mar 21, 2021 → Filed with AG Jul 8, 2021109d ✗ ME AG >90d16 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_2498cf3d61584cfeCalifornia State AGfiled 2021-07-08Candidate
- bd_641fa664e7fa983fHHS OCRfiled 2021-07-08Verified
- bd_7f8a3a5d1d0c1ff6Washington State AGfiled 2021-07-08Verified
- bd_107e3f0f52c95ee9Montana State AGfiled 2021-07-09(1d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 1d gap
- bd_8f8adf6678098d27Oregon State AGfiled 2021-07-09(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bbe80967-75c4-4906-8c92-1c457081afad.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 8, 2021
- Raw hash
- 1ca6b7d12435d1fba5cee0f8da3a2dde9363b6aaa6d380b37eb5b1851c15636c
Reporting entity
- Name
- CNA FINANCIAL CORPORATIONnorm: cna financial
- Domain
- cna.com
- Industry
- Financial Services
Victim entity
- Name
- CNA FINANCIAL CORPORATIONnorm: cna financial
- Domain
- cna.com
- Industry
- Financial Services
Incident
- Discovered
- Mar 21, 2021
- Materiality determined
- —
- Notification sent
- Jul 9, 2021
- Affected individuals
- 75,349
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 16 weeks(109 days from discovery to filing)
- Compliance flags
- ME AG >90d · 109dME resident >60d · 110d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 21, 2021→ Filed with AG: Jul 8, 2021109d 90 days ME AG >90d Maine Discovered: Mar 21, 2021→ Notified: Jul 9, 2021110d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.