Reporting a Data Breach
Pursuant to Conn. Gen. Stat. § 36a-701b, any person who owns, licenses or maintains computerized data that includes personal information is required to disclose a security breach to the Office of the Attorney General and to state residents whose personal information is believed to have been compromised. Note that “any person” includes companies.
To report a new data breach using the Connecticut Attorney General’s online submission form here. To update or supplement a previously reported breach, please send an email to ag.breach@ct.gov, preferably with the case number (PR#######).
Below are answers to Frequently Asked Questions on data breach reporting obligations.