Cybercrime and Benefits Plans
May 24, 2022
Cybercrime and Benefits Plans

According to recent estimates from the University of Maryland, there is a cyberattack every 39 seconds. Data breaches and cyberattacks are daily headlines—and employee benefits plans are no exception to that threat.


In fact, employee benefits plans are even more vulnerable as the coronavirus pandemic continues. Organizations and benefits providers are relying heavily on electronic access, ultimately creating new vulnerabilities.


The Risks

Virtually any type of employee benefits plan is vulnerable to hackers. The plans can be exposed to risks relating to privacy, security and fraud.


Retirement, savings and health plans are attractive targets for cybercriminals seeking access to plan assets and the personal information of participants and beneficiaries. Sensitive information is valuable information when it comes to cyberattacks.


Benefits plans are at risk as a result of the following factors:


  • Personally identifiable information such as Social Security numbers, birthdates and email addresses have significant value to hackers. That information can be misused over a long period of time since it is permanently associated with an individual.
  • Financial information, including enrollment data, account balances, direct deposit information and compensation are highly attractive. Hackers could target those online accounts to request loans, distributions and withdrawals.
  • Lastly, there are multiple attack points for hackers since benefit plans are connected to several outside service providers, such as those that offer retirement plans, health insurance, vision insurance, dental insurance, short-term or long-term disability insurance, and flexible spending accounts.


Some examples of cyberthreats include phishing, malware and ransomware attacks. Lost or stolen mobile devices, laptops and flash drives that hold personal information are additional tangible threats to benefits plans.


The Consequences

Cyberattacks on benefits plans can have substantial consequences for all parties involved. Consider the following:


  • Significant costs may be incurred in detecting the extent of the breach, investigating and managing the incident response, recovering compromised data and restoring overall system integrity.
  • The theft of personally identifiable information and other plan assets may result in monetary losses to participants, beneficiaries, the plan, the plan sponsor and service providers.
  • Organizations may experience operational disruption and reputation damage as a result of a security breach. Additional costs will be incurred to respond to and resolve either of those issues.
  • Breaches of health plans may result in potential violations of the federal law that restricts release of medical information, exposing the plan sponsor and service providers to fines.


Mitigating Risks

As many employees and providers may be working from home, it’s especially important to understand cyberthreats and how to proactively protect sensitive organization and employee information. To mitigate cyber risks, consider the following measures:

  • Properly monitor technology. To better protect and control data, it’s important to maintain up-to-date technology across the organization. Identify current vulnerabilities by conducting a gap analysis, penetration testing or other assessments.
  • Educate employees. Start with properly training employees, especially those who are working remotely, on how to handle personnel data. This could be as simple as compiling and sharing cybersecurity tips. Think about physically protecting electronic devices and information (e.g., locking laptops and hiding information on camera) in addition to secure document storage and destruction. Pay special attention to common risks like passwords, attachments and Wi-Fi networks. Employees should always be vigilant, but may have their guards down while working from home.
  • Educate participants. Similar to the points above, it’s important to educate participants about cybersecurity and different kinds of potential threats. It’s a good idea to thoroughly explore and ask questions about service providers’ security policies.


To shift cyber risks, consider the following measures:


  • Review contracts. Legacy contracts don’t consider modern-day cyber risks. It’s important to review contractual arrangements to ensure vendors provide an appropriate level of protection against cyber risks.
  • Obtain comprehensive insurance policies. Cyber liability insurance covers financial losses that result from data breaches and other cyber incidents. Most policies include both first-party and third-party liability coverages. It’s important to review and understand business insurance policies to understand whether additional coverage is needed.


With many employees working remotely as a result of the pandemic, plan sponsors should consider updating work-from-home policies to include cybersecurity clauses.


Other Considerations

Open enrollment season is a good time to carefully review organization and vendor security technology and policies, along with any contracts, insurance or other coverage. All parties involved should have adequate data protection strategies in place.


Always be prepared for the worst to happen. In the unfortunate event of a security breach, it’s important to be prepared with a basic communication and action plan. Even better, incorporate security breaches in an organization’s comprehensive reputation management plan. Keep in mind all internal and external audiences, and appropriate actions to protect information and restore overall system integrity. If not handled quickly and appropriately, reputational damage could be an additional threat to all parties involved in employee benefits plans.


Click here to download a pdf of the Top Tips to Avoid Cyberattacks. 


To learn more about mitigating cyber risks in today’s digital world, contact SimcoHR today.


Sign up for our newsletter.

11 May, 2024
On April 29, 2024, the U.S. Department of Labor’s (DOL) Wage and Hour Division (WHD) published Field Assistance Bulletin (FAB) No. 2024-1 on the use of artificial intelligence (AI) in the workplace. The FAB follows a statement released by the White House announcing key AI-related actions following President Joe Biden’s executive order issued on Oct. 30, 2023, on establishing standards for AI safety and security. Guidance on AI-related Wage and Hour Risks Employers are increasingly using AI tools to generate timecards, set schedules, monitor performance, track employee hours and process payroll. As such, the FAB highlights certain compliance risks under the Fair Labor Standards Act (FLSA) for employers using these tools. These risks include: Tracking employee work time; Monitoring employee break and waiting time; Using location-based monitoring for individuals performing work at multiple geographic locations; Calculating employees’ regular rate of pay and overtime compensation; and Violating the FLSA’s antiretaliation provisions To aid employers in addressing these compliance risks, the WHD identifies recommended practices, including exercising proper human oversight, to help ensure that AI systems and tools do not violate the FLSA. Additional AI-related Guidance In addition to addressing FLSA compliance risks, the FAB also examines certain AI-related risks that may arise under other laws, including the Family and Medical Leave Act (FMLA), the Providing Urgent Protections for Nursing Mothers Act (PUMP Act) and the Employee Polygraph Protection Act (EPPA). For example, using AI tools to administer FMLA leave can create potential risks for violating the law’s certification requirements when determining whether an employee’s leave is FMLA-qualifying. Employer Action Items While FABs are not necessarily legally binding, they offer insight into how the DOL interprets laws it enforces and how agency officers will analyze workplace conditions and circumstances to enforce compliance.  Using AI systems for scheduling, timekeeping and calculating rates of pay and overtime may increase an employer’s risk under the FLSA. Therefore, employers should ensure that their AI systems and tools comply with all federal laws and regulations by examining potential legal and business risks associated with AI, implementing AI usage policies and establishing internal best practices.
30 Apr, 2024
As we step into May, we're reminded of the importance of mental health and well-being. May marks Mental Health Awareness Month, offering us an opportunity to renew our commitment to nurturing our minds and fostering supportive environments, both in and out of the workplace. In this blog post, we'll explore practical strategies for enhancing mental health, including small tips that can refresh you mentally during the workday. Embracing Self-Care Amid life's hustle and bustle, it's crucial to carve out time for self-care. Whether it's practicing mindfulness, engaging in hobbies, or simply taking a moment to breathe deeply, prioritizing self-care nurtures mental resilience and fosters a sense of inner peace. Cultivating Work-Life Balance In today's fast-paced world, achieving a healthy work-life balance is essential for mental well-being. Set boundaries between work and personal life, establish a routine that includes breaks and leisure activities, and strive to unplug from technology during downtime. Remember, balance is key to sustaining productivity and happiness. Fostering a Supportive Workplace Culture Employers play a pivotal role in promoting mental health in the workplace. Encourage open dialogue about mental health, offer resources such as counseling services or mental health days, and prioritize flexibility to accommodate employees' well-being needs. By fostering a supportive culture, organizations cultivate environments where employees feel valued, understood, and empowered to prioritize their mental health. Supporting Loved Ones If someone you care about is struggling with mental health challenges, your support can make a significant difference. Listen without judgment, offer empathy and reassurance, and encourage them to seek professional help if needed. Remember, your presence and understanding can provide comfort and strength during difficult times. Practicing Gratitude Gratitude is a powerful tool for enhancing mental well-being. Take time each day to reflect on moments of gratitude, whether it's appreciating the beauty of nature, expressing gratitude for supportive relationships, or acknowledging personal achievements. Cultivating a mindset of gratitude fosters resilience and enhances overall happiness. Small Tips to Refresh Your Mind During the Workday  Take short breaks: Step away from your desk for a few minutes to stretch, walk around, or simply gaze out the window. These brief pauses can rejuvenate your mind and boost productivity. Practice deep breathing: Incorporate deep breathing exercises into your day to reduce stress and promote relaxation. Close your eyes, inhale deeply through your nose, hold for a few seconds, and exhale slowly through your mouth. Connect with nature: Spend time outdoors during your lunch break or coffee breaks. Even a brief stroll in a nearby park or green space can invigorate your senses and clear your mind. Listen to music: Create a playlist of soothing music or uplifting tunes to listen to during work breaks. Music has the power to uplift your mood, reduce anxiety, and enhance focus. Stay hydrated: Drink plenty of water throughout the day to stay hydrated and maintain mental alertness. Dehydration can impair cognitive function, so keep a water bottle handy and sip regularly. Practice mindfulness: Take a few moments to practice mindfulness or meditation exercises. Focus on your breath, observe your thoughts without judgment, and cultivate a sense of presence and calm. Declutter your workspace: A clutter-free workspace can promote mental clarity and productivity. Take a few minutes to tidy up your desk, organize files, and create a calming environment conducive to focus. Engage in positive self-talk: Replace negative self-talk with affirming and encouraging statements. Remind yourself of your strengths, accomplishments, and capabilities, and cultivate a mindset of self-compassion and resilience. Connect with colleagues: Build supportive relationships with coworkers by engaging in meaningful conversations, sharing experiences, and offering mutual support. A sense of camaraderie and connection can foster a positive work environment and bolster mental well-being. As Mental Health Awareness Month unfolds, let's commit to nurturing our minds and supporting those around us. By embracing self-care, fostering work-life balance, promoting workplace well-being, and offering compassionate support to loved ones, we contribute to a culture of mental health awareness and resilience. Remember, you are not alone. Reach out for support if you need it, and let's journey toward better mental health together.
30 Apr, 2024
On April 23, 2024, the U.S. Department of Labor (DOL) announced a final rule to amend current requirements employees in white-collar occupations must satisfy to qualify for an overtime exemption under the Fair Labor Standards Act (FLSA). The final rule will take effect on July 1, 2024. Increased Salary Level The FLSA white-collar exemptions apply to individuals in executive, administrative, professional, and some outside sales and computer-related occupations. Some highly compensated employees may also qualify for the FLSA white-collar overtime exemption. To qualify for this exemption, white-collar employees must satisfy the standard salary level test, among other criteria. This salary level is a wage threshold that white-collar employees must receive to qualify for the exemption. Starting July 1, 2024, the DOL’s final rule increases the standard salary level from: $684 to $844 per week ($35,568 to $43,888 per year); and $107,432 to $132,964 per year for highly compensated employees. On Jan. 1, 2025, the standard salary level will then increase from: $844 to $1,128 per week ($43,888 to $58,656 per year); and $132,964 to $151,164 per year for highly compensated employees. Automatic Updates The DOL’s final rule also includes mechanisms allowing the agency to automatically update the white-collar salary level thresholds without having to rely on the rulemaking process. Effective July 1, 2027, and every three years thereafter, the DOL will increase the standard salary level. The agency will apply up-to-date wage data to determine new salary levels. Impact on Employers The first salary level increase in July is expected to impact nearly 1 million workers, while the second increase in January is expected to affect approximately 3 million workers. Employers should become familiar with the final rule and evaluate what changes they may need to adopt to comply with the rule’s requirements. Legal challenges to the rule are anticipated, which may delay the final rule’s implementation.

Have a question? Get in touch.

Share by: