The attack was caused by “a sophisticated cybercrime group” as part of a cybercrime campaign against the insurance industry, according to the release.