Citizens Property Insurance Corp. suffered a data breach when a cyber actor hacked a system earlier in the year.
It refused to pay any ransom to the attackers, consistent with recent FBI advisories, the company said in an email to Best’s News.
It continues to work with law enforcement and cybersecurity partners to “ensure the threat remains contained” and has notified nearly 5,000 potentially impacted people, it added.
“Citizens has no evidence that any policyholder data systems have been compromised or misused as a result of the cybersecurity incident,” the Florida insurer said. However, names or other personal identifiers were exposed, along with Social Security numbers.
The “sophisticated cybersecurity incident” started on Jan. 4 and was discovered two days later, Citizens said in a breach notification letter posted by the Officer of the Maine Attorney General. It said four Maine residents were affected.
The unauthorized actor accessed part of Citizens’ computer network, the company said.
Citizens determined what information was breached in late March, after conducting a forensic investigation with external cybersecurity professionals.