Cyber Liability: An Emerging Risk for Health Care Firms

June 15, 2015

It’s no secret that “cyber liability” has become a popular term in the news, and cyber-attacks seem to be more and more frequent. In fact, just a few short months ago Anthem made headlines when they discovered that hackers had implemented a cyber-attack in order to gain unauthorized access to their IT system and obtain personal patient information. Anthem is not the only health care related organization to have suffered a data breach or cyber-attack, and they certainly won’t be the last. This is why having the right Healthcare Cyber Liability prevention procedures in place and related insurance coverage is imperative.

It’s vital to remember that any type of healthcare facility, provider or related organization can suffer a data breach, which is increasingly being used to obtain Personal (or protected) Health Information (PHI).  Patient billing and insurance records are particularly attractive as they contain valuable data such as social security numbers, addresses and payment details.  According a recent Data Breach Category Summary provided by the Identity Theft Resource Center, health care organizations account for more than 40% of all data security breaches reported across all industry segments nationwide. While obtaining the right insurance protection is essential to protecting your firm financially, it’s also prudent to do everything in your power to prevent a breach from happening, including:

  • Conducting a risk assessment to identify factors such as current online security policies, systems configuration, password protocols, threats, and vulnerabilities.
  • Providing consistent HIPAA education to employees and ensuring they are aware of all HIPAA rules and regulations.
  • Monitoring all devices (including mobile) used by the firm for business purposes.
  • Encrypting internal data and hardware, and developing a very strict BYOD (Bring Your Own Device) policy, where employees are allowed to use their own personal devices to conduct business.
  • Examining service-level agreements carefully to prevent third-party vendor cyber-attacks.

These are just some of the ways your organization can take action to prevent data breaches and cyber-attacks. It’s also important to review your insurance coverage and make sure you are properly protected should an online attack occur.  A cyber-attack has both financial and reputational effects on your business.

At Manchester Specialty Programs, you will find all the insurance coverage you need to operate your business, and all in one program. We deliver specialty insurance programs that are specifically designed for home care and hospice firms in both medical and support roles. We can offer cyber liability coverage to eligible firms as part of our professional liability coverage, management liability, health care suite or on a “stand alone” full coverage basis.  Our comprehensive home health care and hospice provider insurance program is designed to help these agencies continue to provide the important services they offer throughout our communities. To find out more about our operation and all our specialty insurance programs, you or your local insurance broker can give us a call today at 855-972-9399.