A large insurance company had to hire a legal firm as part of an investigation of their own data security system. Last fall the insurance giant fell victim to a cyber attack, which compromised the personal information of over a million customers and potential customers.