Robert Pick

🚨 Aflac reported a data breach following a cyberattack that aligns with Scattered Spider tactics. 📢 The insurer submitted a data breach notice in Maine, but specific impacted information has not been detailed publicly. ➡️ https://lnkd.in/e9Tuvpar #cybersecurity #databreach #insurance #aflac

85

1 Comment

Erie Insurance and Philadelphia Insurance Companies grappled with extended system outages following cybersecurity incidents in early June, prompting errors & omissions concerns for independent insurance agents. Meanwhile, Independent Agent highlighted 10 young agents and their perspectives on next gen talent recruitment, leadership and more. Also, Charles Symington, Big “I” president & CEO, was featured in a panel at the 2025 Insurance Information Institute’s Joint Industry Forum in Chicago, highlighting tax reform and legal system abuse. Independent Agent magazine is the authoritative source of information for professionals who sell insurance for independent agencies. Whether it’s a seasoned agency principal, producer, or account representative, Independent Agent helps agency employees increase sales and deliver an industry-leading customer experience. Here are the five most-read articles on https://hubs.la/Q03w58l10 in June and click the link below for more details! https://hubs.la/Q03w57KV0

4

Breadcrumb Cybersecurity is proud to share that our Managing Director, Brian Horton, will be presenting at the NetDiligence Philadelphia Conference. As part of the Career Pathways Program for Young Insurance Professionals—a one-day track designed for those with 1–4 years of cyber insurance experience—Brian will be speaking on the importance of immutable backups in modern incident response. This program brings together emerging professionals from carriers and brokerages to explore core security practices, incident response strategies, and legal/regulatory considerations, while building connections that will shape the next generation of leaders in cyber insurance. https://lnkd.in/gjkKQTVs https://lnkd.in/eBdB9vNv https://lnkd.in/g4StTuq6 https://lnkd.in/guKsF57p #CyberRiskSummit NetDiligence® Brian W. Horton

25

1 Comment

📢 CT Insurance Agents: Are You Prepared to Report a Cyber Incident? Under Connecticut’s updated data privacy and cybersecurity rules, agencies must now report qualifying cybersecurity incidents to the Department of Insurance (CID)—especially if they affect your agency, a related business, or a third-party vendor. 🛑 What triggers mandatory reporting? • Ransomware attacks • Incidents affecting critical systems • Breaches involving consumer data • Events requiring notification to law enforcement ⏱️ The clock starts once the incident is confirmed. 📬 Reports must be submitted using CID’s portal. ⚠️ Non-compliance can result in enforcement actions. 🔐 This article outlines what to report, how to report it, and how to protect your agency. 📖 Read the full post: 👉 https://lnkd.in/eRyi_PGX Explore our resources: www.bigict.org/cyber #BigICT #Cybersecurity #CTInsurance #InsuranceCompliance #IndependentAgents #RiskManagement #CyberRegulation

2

📰 KEYNOTE: Axis’ Lori Bailey warned that the cyber insurance market has reached a series of “strategic junctions” that will determine its future resilience and relevance, speaking Tuesday at this week’s NetDiligence Cyber Risk Summit in Philadelphia. 🟢 Read the full story >>> https://lnkd.in/dKAv765x AXIS (AXIS Capital) | Lori Bailey | NetDiligence® | Thomson Reuters 🔓 Not a subscriber yet? Fill out this form to learn more and gain access: https://lnkd.in/esyaQ7GJ 🔍 Key takeaways: ✅ Bailey said the cyber market has reached “age 28” — a maturity point requiring deliberate action to address pricing, ransomware exposure, and regulatory change ✅ She urged collaboration across insurers, reinsurers, MGAs, and regulators, noting that “motion isn’t a strategy” and calling this the sector’s “maturity moment” #news #insurance #cyber #NetDiligence #AxisCapital #leadership #TheInsurer #Reuters

165

3 Comments

Ascot’s Kelly Lee and Matt Kuhn will share their perspectives on panels during the NetDiligence® Cyber Risk Summit. Kelly will speak at the Career Pathways Program on 10/6 at 11:30 AM, sharing insights on cyber claims trends and how they inform risk evaluation. Attendees will hear real-world case studies from seasoned claims professionals. Matt will join a panel on 10/7 at 1:45 PM focused on “The Honest Truth about Cyber Policy Insuring Agreements,” discussing the wide variation in cyber liability policies and how coverage aligns with different industries and company sizes. #CyberRiskSummit

70

2 Comments

The state of Rhode Island publicly released the results of a third-party analysis of the 2024 RIBridges cyberattack and data breach at a press conference with Rhode Island Governor Dan McKee and Chief Digital Officer Brian Tardiff. Cybersecurity company CrowdStrike conducted the analysis, which revealed the five-month timeline of the breach and a more accurate number of impacted individuals -- approximately 644,401 people. RIBridges is a system run by Deloitte that the state of Rhode Island uses to administer important social services benefits like health insurance, food stamps and the Child Care Assistance Program. As previously reported, Deloitte informed the state of a potential security threat to RIBridges on Dec. 5, 2024, stating that there was a high probability that a cyberthreat actor had obtained files containing sensitive information. The Brain Cipher cyberthreat group later took responsibility for the hack. The state took RIBridges temporarily offline and later sent notification letters to nearly 650,000 individuals. The newly released third-party analysis provided clarity on how the cyberthreat actor gained access to the RIBridges environment and how it performed data access, staging and exfiltration activities on 28 RIBridges systems. Reviewing post-incident analyses of healthcare data breaches can help defenders bolster security efforts. https://lnkd.in/gBJR5kBh

7

Two insurers. Two major outages. Zero ransomware. In a pair of high-profile attacks, Erie Insurance Group and Philadelphia Insurance Companies both took systems offline to contain cyber threats—not because of ransomware, but to prevent something potentially worse: data theft. Keith Fricke, partner at tw-Security, spoke to Marianne McGee of Information Security Media Group (ISMG) about this emerging tactic. Threat actors are increasingly bypassing encryption and instead exfiltrating sensitive data—like identities, financials, even medical records—for extortion or sale. It's lower risk, yields fast leverage, and is harder to detect. The main takeaway? Ransomware isn’t the only danger anymore. If you're only preparing for encryption-based attacks, you're behind. 🔗 Read the full article below to hear Keith’s perspective and learn why security fundamentals still matter more than ever. #infosec #cybersecurity #databreach #healthcaresecurity

12

1 Comment

Erie Insurance says it is making “steady progress” in its efforts to restore its computer systems that have been down since its information security team detected unusual activity on June 7. https://champ.ly/NYANxe4N

46