CNA Data Breach Lawsuit Investigation
On January 13, 2025, CNA confirmed a cyber-incident that allowed an unauthorized party to access parts of its network for nearly three months. The insurer is now notifying affected individuals and offering complimentary identity-protection services. If you received a breach letter, review the facts below and explore your legal and security options.
Key Details of the CNA Data Breach
Company involved: Continental Casualty Company and its affiliates (CNA)
Industry: Insurance
Breach window: October 21, 2024 – January 13, 2025
Discovery date: January 13, 2025
Notice issued to state regulators: January 30, 2026 (Maine)
Information exposed: Name plus additional personal data listed in company files
Evidence of misuse: None reported as of the notice date
Free services offered: Credit monitoring and identity-restoration services through Epiq
Law-enforcement notified: Yes
Timeline of Events
October 21, 2024 – January 13, 2025: Network Access
An unauthorized third party had access to a limited portion of CNA’s network and copied files connected to certain current and former health-plan members.
January 13, 2025: Incident Discovered & Contained
CNA detected the intrusion, secured its systems, and engaged third-party forensic specialists. The company also informed law-enforcement authorities.
January 30, 2026: Public Notice Filed
After completing a detailed file review, CNA submitted a notice to the Maine Attorney General and began mailing letters to impacted individuals.
What Data Was Involved?
The notice states that files contained your name and unspecified additional personal information related to your health-plan records. CNA’s review did not find evidence of actual or attempted misuse.
Complimentary Credit Monitoring
CNA is providing credit monitoring and identity-restoration services through Epiq at no cost. Impacted individuals must enroll by the deadline listed in their letter to activate benefits, which include:
Credit report monitoring
Identity-theft detection alerts
Fraud resolution and identity-restoration assistance
Steps You Can Take Now
Register for the free monitoring service as soon as possible.
Review bank, credit-card, and insurance statements for unfamiliar activity.
Consider placing a fraud alert or security freeze with the credit bureaus.
Retain copies of all correspondence for potential legal claims.
Consult a data-privacy attorney to evaluate compensation options.
Company Overview
Continental Casualty Company and its affiliates (CNA) is a Chicago-based insurance carrier founded in 1897. The firm, now part of Loews Corporation, employs approximately 6,500 people and trades on the NYSE under the ticker symbol CNA.
Quick Facts
Headquarters: 151 North Franklin Street, Chicago, Illinois, United States
Industry: Insurance
Employees: ~6,500
Parent company: Loews Corporation
Website: cna.com
Social links: LinkedIn · X/Twitter · Facebook · YouTube · Instagram
Sources
Impacted Entities
Frequently Asked Questions
I received a data breach letter from CNA — what should I do?
Follow the instructions in the letter to enroll in the free credit-monitoring service, monitor your accounts, and consider speaking with a privacy attorney about possible claims.
How do I submit a claim related to the CNA data breach?
Contact a data-breach lawyer who can evaluate your eligibility and file a claim on your behalf. Keep copies of your notification letter and any related expenses.
Am I eligible to join a lawsuit against CNA?
If you received an official notice or can confirm your information was in the stolen files, you may qualify. An attorney can provide a free case review.
What information did the CNA breach expose?
The impacted files included your name and other personal information tied to your health-plan records. CNA’s notice did not specify each data field.
Did CNA offer credit monitoring, and for how long?
Yes. CNA is offering complimentary credit-monitoring and identity-restoration services through Epiq. The enrollment deadline is listed in your letter.
How can I get the official breach notice (PDF) for CNA?
You can download the filing submitted to the Maine Attorney General directly here or by clicking the button near the top of this page.
Attorney Advertising. Prior results do not guarantee a similar outcome.
