Extract to table
Pull the structured facts out of a document: parties, dates, amounts, obligations.
Extract to table / sc-final-forensic-analysis-memo.docx
sc-final-forensic-analysis-memo.docx
Parties
Harkness LLP
Officer Quorum Insurance Holdings Corp
Palomar Data Solutions Security Inc
Quorum Insurance Holdings Corp
Graystone Forensics LLC
Pinnacle Surplus Lines Insurance Corp
Security Inc
Clearfield Notification Services LLC
Dates
July 18, 2023
July 14, 2023
May 5, 2023
March 14, 2023
April 18, 2023
September 15, 2022
November 12, 2019
April 21, 2023
April 20, 2023
June 8, 2023
Amounts
$2.1
$14.2
$16.3
$16,300,000
$32,600,000
$8,230,250
$32.6
$10
$2,500,000
$620,000
Obligations
Quorum's determination that a cybersecurity event occurred was made following receipt of Palomar's notification and Calderwood & Harkness's preliminary assessment, and the 72-hour notification to the Connecticut Insurance Department is a parallel obligation that must be tracked separately from the general breach notification timeline
Regulatory notifications under the SHIELD Act must be made to three state agencies: (1) the New York Attorney General; (2) the New York Department of State; and (3) the New York Division of State Police
These notifications must be made at the time notification is provided to affected individuals
Because more than 500 California residents are affected by this breach, Quorum is required to notify the California Attorney General in addition to affected individuals
The AG notification must include a sample copy of the notification letter sent to affected California residents
The California AG's office maintains an online submission portal for breach notifications, and the filing must be made electronically through this portal