Commissioner's Logo
CONSUMER NOTICE – July 20, 2023

Potential Identity Theft Alert: How to Protect Your
Personal Information in Connecticut


A significant data breach involving a third-party data provider has affected multiple insurance companies serving Connecticut consumers. This breach potentially exposes personal information, including Social Security numbers and birthdates. Although the breach primarily impacts life, annuity, and long-term care products, it is important to be aware that this MOVEit attack — involving MOVEit, a company providing cloud-hosting and file transfer services to many organizations — has targeted various entities across the United States.

Identity theft is a serious concern. When your personal information is compromised, criminals may use that information to fraudulently obtain credit in your name and other potentially illegal activities. If your personal information is exposed due to cybersecurity events like the MOVEit attack, Connecticut law requires that insurance companies notify the CID Commissioner and consumer’s whose personal information may have been compromised.

What should you do now?

  1. Verify communication: If you receive a letter or email claiming to be from your insurance company, make sure to verify its authenticity. You can do this by calling the customer service number listed on your policy, an old invoice, your insurance card, or the number for your insurance agent.
    If you are unsure of who to call, contact the Connecticut Insurance Department for assistance.
  2. Carefully read any notice you receive regarding the data breach. Your insurance company will likely offer free two-year credit monitoring services to safeguard your credit report from unauthorized activity.
  3. Beware of phone scams. Use caution if you receive a call from someone claiming to be from your insurance company. It is highly unlikely that your insurer will contact you by phone. Legitimate notices will typically be sent by mail or email. If you receive a suspicious call, hang up and reach out directly to the company using a trusted phone number you already have.
  4. Use caution with any unsolicited offers, phone calls, or emails from unknown sources claiming to assist you. Do not trust offers asking for payment or requesting information your insurance company should already possess. When in doubt, hang up and contact your insurance company directly.
  5. When contacting your insurance company or enrolling in free credit monitoring, you may be asked to provide additional information for verification purposes. It is safe to share this information when you are the one initiating the call using a known and legitimate phone number.

If you have any questions or concerns about the data breach and how it may impact your information with your insurance company, please reach out to the Connecticut Insurance Department at (800) 203-3447 or (860) 297-3900 or through our website.

The Insurance Department’s Consumer Affairs Division is available to answer questions or assist consumer with claims.