Attorneys General in 33 states have reached a settlement with the Nationwide Mutual Insurance Company and its subsidiary, Allied Property & Casualty Insurance Company, concerning an October 2012 data breach. The data breach, which the states allege had been caused by the failure to apply a critical security patch intended to prevent hacking or viral infection, resulted in the loss of personal information belonging to 1.27 million consumers.
The breach included social security numbers, driver’s license numbers, credit scoring information, and other personal data initially collected to provide insurance quotes to consumers applying for Nationwide insurance plans—many of whom did