The insurance company settled with 33 states for failing to patch a vulnerability that allowed a hacker to gain access to its system.

Source: Click here