The insurer, which disclosed the breach in a securities filing late last week, doesn’t yet know what type of data was exposed or how many people may have been impacted.