The U.S. insurance giant tells state regulators that Social Security numbers were among the personal information stolen in its mid-July cyberattack.

Cybersecurity researcher Jeremiah Fowler discovered an unprotected online database in May, exposing over 184 million records ...