CNA Financial Corporation

CNA Financial Corporation is a risk and accountability case because its 2021 ransomware incident placed an insurer in the position usually assigned to its policyholders: it had to prove continuity, data scoping, notice quality, restoration discipline, and control repair while customers, brokers, employees, claimants, regulators, reinsurers, and investors waited for evidence. The public record matters because an insurer is not only a company with systems. It is a risk-transfer institution, a data custodian, a claims processor, and a continuity partner for businesses that may already be under stress.