CNA Financial, a leading US-based insurance company, has suffered a cyberattack impacting its concern operations and shutting down its website.
CNA is considered the sixth-largest commercial insurance company in the USA, according to the indemnity Information Institute, and offers a wide range of insurance products, including cyber indemnity policies.
Starting today, CNA's website began displaying a message stating that they are currently experiencing a network disruption that is impacting some of our systems. We are working to address these issues to denigrate the disruption to you.
Slack now lets you DM multitude outside your company
If you make first-hand info about this or other unreported cyberattacks, you canful confidentially tangency us on signal at +16469613731 or on wire at @lawrenceabrams-bc.
CNA website outage
CNA website outage
Sources get told BleepingComputer that the company suffered a cyberattack that has disrupted business operations and forced them to shut down specific systems.
BleepingComputer has not been able to verify if the outage is caused by a ransomware attack, though it appears likely according to a source familiar with the attack.
Other sources get told The Insurer that the assault is disrupting the underwriting and claims side of the business, likely due to systems becoming unavailable.
In an updated statement on their website, CNA has confirmed that a cyberattack is causing network disruption, including corporate email. To be safe, CNA also confirmed that they disconnected their systems from the network.
The full instruction from CNA canful be scan below.
On march 21, 2021, CNA determined that it sustained a sophisticated cybersecurity attack. The round caused a network disruption and impacted certain CNA systems, including corporate email.
Upon learning of the incident, we immediately engaged a team of third-party forensic experts to inquire and set the full scope of this incident, which is ongoing. We get alerted law enforcement and will live cooperating with them as they lead their own investigation.
Out of an copiousness of caution, we have disconnected our systems from our network, which continue to function. Weve notified employees and provided workarounds where possible to ensure they can continue operating and service the needs of our insureds and policyholders to the best of their ability.
The security of our data and that of our insureds and other stakeholders is of the utmost importance to us and we are committed to continuing to serve them as we work to resolve this issue. Should we influence that this incident impacted our insureds or policyholders data, well notify those parties directly. - CNA.
A treasure trove of data
Attacks on insurance carriers are particularly dangerous as they could allow a ransomware operation to create a heel of future targets covered under a cyber insurance policy.
Depending on the circumstances, it is not uncommon for indemnity companies to pay the insured victims' ransom.
Due to this, the REvil ransomware procedure stated in a recent interview that insurers are valuable targets to create lists of potential targets who are more likely to pay a ransom.
Yes, this is single of the tastiest morsels. Especially to hack the insurers firstto receive their customer alkali and work in a targeted way from there. And after you spell through the list, then hit the insurer themselves, REvil's 'Unknown' told the TheRecord.
While this tone-beginning has not been confirmed to be a ransomware attack, if it is, the threat actors likely stole concern data before encrypting devices.
