Reporting a Data Breach
Pursuant to Conn. Gen. Stat. § 36a-701b, any person who owns, licenses or maintains computerized data that includes personal information is required to disclose a security breach to the Office of the Attorney General and to state residents whose personal information is believed to have been compromised. Note that “any person” includes companies.
Report a data breach using the Connecticut Attorney General’s online submission form here.
Below are answers to Frequently Asked Questions on data breach reporting obligations.