Continental Casualty Company Data Breach

On or around October 21, 2024, Continental Casualty Company and its affiliates (“CNA”) experienced a cybersecurity incident involving unauthorized access to a limited portion of its network. Upon discovering the incident on January 13, 2025, CNA immediately took steps to secure its systems and launched an investigation with assistance from outside cybersecurity and forensic experts.

Following the investigation, CNA determined that an unauthorized actor gained access to parts of its network and copied certain files. After completing a comprehensive review of the affected data, CNA determined that personal information belonging to certain current and former individuals may have been impacted.

On or about January 30, 2026, CNA began mailing formal notification letters to affected individuals and started offering complimentary credit monitoring and identity restoration services for 12 months through Epiq.

Continental Casualty Company, headquartered in Chicago, Illinois, is a major insurance provider offering property, casualty, and specialty insurance products nationwide and internationally. CNA is a subsidiary of Loews Corporation and has been in operation for over a century.

The impacted data may relate to individuals whose personal information was maintained within CNA’s network systems.

Following the breach, CNA implemented additional security measures and safeguards to enhance system protections and reduce the risk of future unauthorized access.

If you received a Data Breach notification letter from Continental Casualty Company and its affiliates, it confirms that your personal information may have been accessed and/or copied by an unauthorized party during this incident.

What information is involved in the RKA Consulting Group Data Breach?

Compromised information may include:

Your Personally Identifiable Information (PII) includes details that can be used to identify you. Organizations that collect and store this information are legally obligated to safeguard it. When companies fail to adequately protect sensitive personal data, they may face legal liability and financial penalties.

The breach also may include Protected Health Information (PHI) if any medical‑related documents were stored within the affected email account. PHI is protected under HIPAA and state privacy regulations. Exposure of PHI increases risks of medical fraud, insurance fraud, and unauthorized use of your health data.

When personal information is exposed in a data breach, it can be used to commit identity theft, financial fraud, and other forms of misuse — often months or even years after the incident.

If your data has been exposed in a breach, one of the most effective steps you can take is to promptly enroll in the offered credit and identity monitoring services and continue monitoring your financial accounts and credit reports for suspicious activity.

Residents of California benefit from enhanced privacy protections under the California Consumer Privacy Act (CCPA), which provides additional rights regarding the collection, storage, and protection of personal information. California residents may also have additional legal remedies when personal data is compromised in a breach.

If you received a NOTICE OF DATA BREACH letter from Continental Casualty Company and its affiliates (CNA), your personal and financial information may be at risk. This type of sensitive information can be exploited by cybercriminals to commit fraud, identity theft, and related crimes.

Contact the Data Breach Lawyers at Emery | Reddy, PC for a Free Case Review today.