MCNA Insurance Company, a provider of insurance services, disclosed a significant data breach in March. Unauthorized third parties accessed certain systems between February 26, 2023, and March 7, 2023. Approximately 8.92 million individuals were impacted by this breach.
Specific weaknesses are not disclosed, but potential vulnerabilities could include:
- Inadequate Access Controls: Unauthorized access suggests weak controls.
- Lack of Intrusion Detection: Delayed detection of the breach.
- Third-Party Risks: Assessing security practices of vendors or partners.
MCNA identified the breach during an internal investigation prompted by suspicious activity. Immediate response efforts led to the discovery of unauthorized access.
Potentially impacted personal information includes:
- Name
- Date of birth
- Address
- Telephone and email
- Social Security number
- Driver’s license number or government-issued identification number
- Health insurance information
- Dental/orthodontic care information
In response to this data breach, MCNA promptly notified affected individuals and likely conducted a thorough investigation.