Continental Casualty Company and its affiliates (CNA)
ent_51dd4b28e4c3e810
Disclosures
4
HHS OCR · State AG · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
6,086
nationwide · HHS OCR IL
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Continental Casualty Company and its affiliates (CNA)
- Normalized
- continental casualty company and its affiliates cna— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- cna.com
Disclosure history (4)newest first
- ILLINOISHHS OCRas victim2026-03-23
Continental Casualty Company (CNA) reported to HHS on 2026-03-23 a Hacking/IT Incident affecting 6086 individuals. Breached information located on Network Server. Business Associate was present.
- Texas State AGas victim2026-02-02
Continental Casualty Company and its affiliates (CNA) based in Chicago, Illinois, a insurance services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-01-13 and reported on 2026-02-02. 381 Texas residents were affected. 5,875 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Medical Information.
- Vermont State AGas victim2026-01-28
Conduent Business Services, LLC, a third-party service provider for Continental Casualty Company, disclosed a cyber incident affecting data of health plan members. Unauthorized access occurred from Oct 21, 2024, to Jan 13, 2025. Affected data included names and government identifiers. Conduent engaged forensic experts, secured systems, and offered credit monitoring.
- Illinois State AGas victim2026-01-01
CONTINENTAL CASUALTY COMPANY AND ITS AFFILIATES ("CNA") filed a data-breach notice with the Illinois Attorney General in January 2026 (case 26-01-776). The register records the breach as discovered on January 13, 2025. Personal information types reported: medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
Supply-chain cascadesreviewed and confirmed
- Continental Casualty Company and its affiliates (CNA)’s filing is one of at least 4 in the CONDUENT BUSINESS SERVICES, LLC supply-chain incident (2025).