CNBC reports that the insurance company was accused of negligence and violations of multiple consumer privacy data laws which led for cybercriminals to access customers’ personal information.