One of the largest insurance companies in the United States, CNA Financial, reportedly paid a ransom of $40 million in March to get access to its online network again after a cyberattack.

The company paid the hackers approximately two weeks after key parts of the company data were stolen in March and employees were locked out of their online network, Bloomberg reported.