A coalition of attorneys general from 30 states, including California, Connecticut, Florida and New Jersey, reached a $10 million settlement agreement with Premera Blue Cross over its alleged failure to secure consumer data.

According to the settlement agreement, Premera’s insufficient data security gave a hacker access to health and personal information of more than 10.4 million consumers nationwide.