Printed from BusinessInsurance.com

CNA disconnects systems after 'sophisticated' cyberattack

Posted On: Mar. 23, 2021 8:48 PM CST

CNA

CNA Financial Corp. said Tuesday it has been the target of a “sophisticated cybersecurity attack.”

In a statement, the insurer said it determined on Sunday that the attack “caused a network disruption and impacted certain CNA systems, including corporate email.”

CNA's website remained down Wednesday afternoon with just alternative contact information showing on the home page.

The insurer alerted law enforcement and brought in a team of third-party forensics experts to investigate and determine the incident’s full scope, the statement said. 

“Out of an abundance of caution, we have disconnected our systems from our network, which continue to function,” the statement said.

The insurer has provided employees with workarounds “where possible,” CNA said.

The insurers said it will notify its insureds and policyholders if it determines the incident has affected its data.

The attack is the second recent cyber breach at a major insurance-related company in the Chicago area. In September, Gallagher Bassett Services Inc., the claims management unit of Arthur J. Gallagher & Co., reported a ransomware attack.