August 9, 2017

Connecticut joined with 31 other states and the District of Columbia in a $5.5 million settlement with Nationwide Mutual Insurance Company and its subsidiary, Allied Property & Casualty Insurance Company, that resolves the states’ investigation into a 2012 data breach that exposed sensitive personal information of 1.2 million consumers across the country. On October 3, 2012, Nationwide and Allied (collectively, “Nationwide”), experienced a data breach when, the states’ investigation found, hackers exploited a vulnerability in the companies’ third-party Web application hosting software. The states’ investigation found that Nationwide had failed to apply a critical software patch that the third-party software company had deployed in 2009 to address the vulnerability. FL

Tagged in: Cybersecurity and Data Breaches,