Insurance giant CNA reports data brea ch after ransomware attack