All business owners in Connecticut need to learn how to report a data breach. A new Connecticut law requires business owners to notify the Office of the Attorney General in the event of a breach of security involving unauthorized access to or acquisition of electronic files, media, databases or computerized data containing personal information. Conn. Gen. Stat. Sec. 36a-701b

Failure to properly report a data breach may constitute a violation of the Connecticut Unfair Trade Practices Act    ("CUTPA").

Penalties under CUTPA can include fines, multiple damages and attorneys 'fees. Conn. Gen Stat. Secs. 42-110a-42-110q

The Office of Attorney General has set up the following email and phone contacts to assist Connecticut businesses in reporting data breach:

Email reports to: ag.breach@ct.gov

For questions call: 860-808-5400

Businesses should include the following in any report to the Attorney General:

1. Name of person reporting, name of business and contact information.
2. A list of the types of personal information that were or are reasonably believed to have been the subject of the breach.
3. A general description of the breach, including the date of the breach and the number of Connecticut residents affected.
4. Whether the notification was delayed because of a law enforcement investigation (if applicable).