SEARCH

A cyberattack reportedly disrupted refrigeration systems at hundreds of French supermarkets, a reminder that for organizations with connected equipment, cyber risk now extends well beyond data theft and ransomware. The attack reportedly targeted internet-connected commercial refrigeration systems, resulting in inventory spoilage, operational disruptions, supply chain challenges, and lost sales. The incident underscores the growing intersection of cyber risk, operational technology (OT), property exposures, and business interruption. As physical systems become increasingly connected to business networks, organizations should consider not only how they are securing that technology, but also how their insurance programs may respond when a cyber event results …

… rather than attempting to overcome technical defenses. These evolving threats can reach across an organization, from employees responding to seemingly legitimate requests to hiring and onboarding processes, financial transactions and other sensitive activities. Organizations should consider strengthening employee training and verification protocols while evaluating how social engineering exposures are addressed within their incident response, insurance and broader risk management strategies. Download EPIC’s latest client alert for practical steps organizations can consider to strengthen human risk management, prepare employees for deepfake-driven attacks, enhance verification controls, reassess hiring and onboarding practices, and evaluate insurance and incident response considerations. Download Now

Cyber vulnerabilities are not solely an IT issue. Two critical vulnerabilities affecting PHP underscore the importance of coordination among risk management, information security, legal, incident response and cyber insurance teams when potentially significant technology exposures emerge. PHP is widely used across websites, web applications and third-party products, potentially creating exposure that organizations may not immediately recognize. With security updates available and exploitation activity reported, organizations should act quickly to identify their PHP exposure, prioritize internet-facing systems and address vulnerable environments. Download EPIC’s latest client alert for key questions risk professionals should be asking and important considerations for …