U.S. insurance giant hacked, rumored to have paid $40 million ransom

Foreign media reported that another cyber attack was reported in the United States, and a major insurance company, CNA Financial Corporation, was hacked in March of this year, and a large ransom was allegedly paid.

Chicago-based CNA Financial Corporation issued a security incident update in the middle of this month, informing customers that “immediate action” had been taken after the March 21 disruption, and that CNA had found no indication that outside customers had been affected by the incident.

CNA told foreign media that the incident was handled in accordance with U.S. laws, regulatory measures and other guidelines, including the Office of Foreign Assets Control’s (OFAC) 2020 ransomware guidelines. Meanwhile, the company did not comment on the ransom, but said it had communicated with the FBI and OFAC about the incident and the identity of the hackers. Foreign media, on the other hand, cited sources familiar with the matter, saying the ransom was as high as $40 million.