Nationwide pays $5.5 million for 2012 breach of 1.27 million accounts

The insurance company settled with 33 states for failing to patch a vulnerability that allowed a hacker to gain access to its system.