Contract analysis

I. COVER LETTER August 14, 2023 CALDERWOOD & HARKNESS LLP ATTORNEYS AT LAW 1700 K Street NW, Suite 900 Washington, D.C. 20006 Telephone: (202) 887-4100 Facsimile: (202) 887-4199 www.calderwoodharkness.com Via First Class U.S. Mail and Electronic Submission Assistant Attorney General Diane Marchetti Office of the Attorney General State of Connecticut Consumer Protection Division 165 Capitol Avenue Hartford, CT 06106 R

II. NOTIFICATION FORM / SUBSTANTIVE FILING CONNECTICUT ATTORNEY GENERAL — DATA BREACH NOTIFICATION FORM Pursuant to Conn. Gen. Stat. § 36a-701b 2.1 Reporting Entity Information Quorum Insurance Holdings Corp. is a diversified insurance holding company that operates through multiple subsidiaries engaged in property and casualty insurance, specialty lines insurance, life and annuity products, and financial technology s

III. ENCLOSURE 1: CONSUMER NOTIFICATION LETTER — GENERAL PII VERSION [QUORUM INSURANCE HOLDINGS CORP. LETTERHEAD] 400 Constitution Plaza, Suite 2200 Hartford, CT 06103 August 10, 2023 [Recipient Name] [Recipient Address] [City, State ZIP] Re: Notice of Data Breach Dear [Recipient Name]: We are writing to inform you of a security incident involving a third-party vendor that may have affected some of your personal info

IV. ENCLOSURE 2: CONSUMER NOTIFICATION LETTER — SSN + FINANCIAL DATA VERSION [QUORUM INSURANCE HOLDINGS CORP. LETTERHEAD] 400 Constitution Plaza, Suite 2200 Hartford, CT 06103 August 10, 2023 [Recipient Name] [Recipient Address] [City, State ZIP] Re: Notice of Data Breach — Financial Information Dear [Recipient Name]: We are writing to inform you of a security incident involving a third-party vendor that may have aff

V. ENCLOSURE 3: CONSUMER NOTIFICATION LETTER — PHI VERSION (HIPAA-COMPLIANT) [QUORUM INSURANCE HOLDINGS CORP. LETTERHEAD] 400 Constitution Plaza, Suite 2200 Hartford, CT 06103 August 10, 2023 [Recipient Name] [Recipient Address] [City, State ZIP] Re: Notice of Breach of Protected Health Information Dear [Recipient Name]: We are writing to inform you of a security incident involving a third-party vendor that may have

VI. SIGNATURE BLOCK AND CERTIFICATION CERTIFICATION The undersigned, Kevin Ostrowski, Partner at Calderwood & Harkness LLP, hereby certifies, on behalf of Quorum Insurance Holdings Corp. ("Quorum"), the following:

1. The information provided in this filing, including the cover letter, the notification form, and the enclosed consumer notification letters, is true, accurate, and complete to the best of the notifying entity's knowledge as of the date of this filing.

2. This filing is submitted in good faith and in compliance with the requirements of Connecticut General Statutes § 36a-701b.

3. Quorum has made reasonable efforts to determine the scope of the breach of security, the identity of affected Connecticut residents, and the types of personal information compromised, and to provide accurate and complete information in this filing based on the results of its investigation as of the date hereof.

4. Quorum acknowledges its obligation to supplement this filing if material additional information becomes available following the date of this filing, including but not limited to any material increase in the number of affected Connecticut residents or any identification of additional categories of compromised personal information.

5. Quorum has authorized Calderwood & Harkness LLP and the undersigned to submit this filing on its behalf and to serve as the designated primary contact for communications from the Office of the Attorney General regarding this matter. Date: August 14, 2023 CALDERWOOD & HARKNESS LLP Counsel to Quorum Insurance Holdings Corp. By: ________ Kevin Ostrowski Partner, Privacy & Data Security Practice Group Calderwood & Har