CASE STUDY
Nationwide dental office avoids ransom payment but incurs business interruption costs during recovery time
Industry
Healthcare
Background
Employees: 3,000+
Coverages: Cyber Extortion, Breach Response, Business Interruption
A nationwide dental company was confronted with a ransomware event impacting more than 50 offices across the U.S. Within 24 hours, they reported it to Coalition Claims¹ and engaged with breach counsel and one of our panel vendors for incident response.²
Because they maintained viable data backups at each location, the dental company was able to quickly start restoring data at the impacted offices and avoid paying the ransom to cyber criminals. Though the incident response was relatively uncomplicated from a technical standpoint, the number of offices and involved parties at each location made the process more challenging.
During the restoration process, the company experienced an unrelated distributed denial-of-service (DDoS) attack. Since the incident response firm had already deployed endpoint monitoring, they quickly remediated the attack to ensure it caused no further damage to the dental company.
Given the complicated restoration process, the company experienced business interruption across the impacted locations for five days. Their Business Interruption Coverage kicked in after their self-insured retention of $25,000, which included data restoration costs and totaled $430,624.
To comply with HIPAA regulations, the dental office reported the incident to the Department of Health and Human Services and the state attorney general. They also sent notifications to a handful of impacted patients.
Coalition brings together active monitoring, incident response, and comprehensive insurance to solve cyber risk. To learn more, visit coalitioninc.com.
1. The claim scenarios described here are intended to show the types of situations that may result in claims. These scenarios should not be compared to any other claim. Whether or to what extent a particular loss is covered depends on the facts and circumstances of the loss, the terms and conditions of the policy as issued and applicable law. 2. Breach response included the engagement of an incident response firm; the insured selected Coalition Incident Response.
Read real stories of claims, risk mitigation, and recovery
Discover how we help policyholders manage and mitigate cyber risk before it strikes in 20 different scenarios across 10 industries in our Active Insurance in Action book.
Coalition’s products are underwritten by certain underwriters at Lloyd’s of London (A.M. Best A+ rating) and Arch Insurance Canada Ltd. (A.M. Best A+ rating).
