Advice for Avoiding a Ransomware Attack
May 26, 2021
Advice for Avoiding a Ransomware Attack

Advice for Avoiding a Ransomware Attack


Earlier this month the country once again bore the consequences of a cyber security breach when Russian hackers, calling themselves DarkSide, coordinated an attack on the computer network of the Colonial Pipeline Co., a major gas pipeline that provides almost half of the gas supply to the East Coast of our country. The Colonial Pipeline Co. paid out a hefty ransom of $4.4 million to get control of their business network back from hackers who had taken over. The decision to pay the ransom did not come lightly and was not agreed upon by some experts, such as the FBI who maintain a policy of not paying ransom to terrorists, but the CEO felt obliged to get the gas supply up and running again for the millions of Americans who were being affected by the shortage of gas and millions more who would pay the price as supply could not keep up with demand.


Targeted attacks are no accident, there is a process that hackers follow that is somewhat predictable, but with awareness and security measures firmly in place are also preventable. Good security protocols that are followed and backed up by continuous monitoring of security are the only hope to prevent this from happening to you. Even with vigilant practices an organization weakest point is usually a human error, so training is imperative to prevention.


How ransomware works

The first step of a ransomware attack is reconnaissance. These bad actors research their targets in advance to determine the likelihood of ransom payment and they identify vulnerabilities and access points. Your business should stay vigilant in security measures and have access points monitored and checked regularly for flaws. Once access points are identified, the hackers use their skills exploiting these by obtaining credentials through phishing, using default passwords, or purchasing access to systems through the dark web. The best way to prevent this is to use secure passwords, double authentication, and train employees on staying vigilant against phishing. It’s also a good idea to have any terminated employees’ access completely cut off as early as possible in the separation process.


Once a hacker gains access to your network, the name of the game is to maintain an open door.  They do this by using malware to create back doors into the system that ensure maintained entry into your network. The next step is to encrypt or destroy your back ups and move through your network looking for additional systems and back-ups to control, encrypt or destroy. Once in control of your network these threat actors steal your data and use this as leverage to force the organization to pay a ransom by threatening to disclose the stolen data publicly and/or they encrypt as many files and systems as possible across the network to refuse you the ability to utilize your network.


Once your data and network are firmly in their handcuffs, a ransom will be requested to release the encrypted files and allow you access. If the victim organization chooses to pay the ransom, usually an experienced incident response firm is engaged to assist with the negotiation of the demand and facilitate the cryptocurrency payment. If the ransom is paid, a decryption key is provided by the hackers and data recovery can occur. If the ransom is not paid the organization must either recover the files from a clean back up or rebuild the files and system from scratch which could take several weeks or months to recover.  


What you can do to avoid ransomware attacks

The dark web is upon us and there are dark forces that work around the clock looking for large payouts and easy targets. Don’t be an easy target! Utilize your IT Security protocols vigilantly, consider a threat assessment by an expert and consider purchasing Cyber Security Insurance for breach response assistance. There are several products available to fit a variety of sizes and types of businesses that protect your business assets in the event of a breach of personally identifiable information, a hostile takeover of your network, interruption of your cloud or the introduction of malware to your system.


Talk to our licensed agent today about products available to protect your organization. In the underwriting process you may find additional tips on security measures that you hadn’t considered before and you can rely on a partner to help get your business through to the other side in case of a cyber security event.

 

The facts

In 2020 ransom and extortion claims accounted for 1 in every 5 cyber claims, up from 1 in every 10 cyber claims in 2018.

 

A ransomware attack on businesses is predicted every 11 seconds, and the global ransomware damage costs predicted to reach $20bn in 2021, up from $325m in 2015.


According to an AIG observation, network outages and business interruption from global ransom and extortion claims are lasting 7-10 days .


By 2025, global cybercrime costs is estimated to reach $10.5 trillion.

Sign up for our newsletter.

The Employer's Guide to 2026 Minimum Wage Updates

November 5, 2025
As we move into 2026, employers across many states and localities are preparing for significant minimum wage increases. Nearly 20 states and more than 40 local jurisdictions will raise their wage thresholds effective January 1, 2026. This poses important planning, budgeting, and compliance considerations, especially for mid-sized employers like those that partner with Simco, where payroll, HR, benefits and advisory services intersect. Below we’ve summarized key state and local minimum wage updates and outlined the steps you should take now to stay ahead of the changes and mitigate risk. State-Level Minimum Wage Increases (January 1, 2026) The table below highlights selected state increases scheduled for January 1, 2026.

The Benefits of Outsourcing HR: Save Time, Cut Costs, and Boost Engagement

October 24, 2025
When HR Is Overloaded, Your Business Feels It For many small to mid-sized businesses, HR is one of the most critical (and most overextended) functions. From payroll and benefits to onboarding and compliance reporting, administrative tasks can quickly consume your team’s time, leaving little room for strategic work that actually moves the business forward. Sound familiar? You’re not alone. A recent survey from Champions of Change: isolved’s Fourth-Annual HR Leaders’ Research Study found that 51% of HR leaders spend four or more hours a day answering repetitive questions. This time could be better spent on employee engagement, culture, and growth initiatives. When HR teams are pulled in too many directions, the consequences ripple across the entire organization, resulting in missed deadlines, frustrated staff, compliance risks, and ultimately, higher turnover. Why HR Leaders Consider Outsourcing Outsourcing HR isn’t just for businesses without dedicated HR teams. In fact, a survey of 1,000 HR decision-makers found that 76% could benefit from outsourcing certain tasks, even though only 54% currently have plans to do so. HR outsourcing allows organizations to offload both core and strategic tasks, including payroll, benefits administration, recruitment, onboarding, compliance support, performance management, employee relations, and workforce analytics, without adding headcount. This augmentation provides a multiplier effect: a small HR team can function like a much larger one, accomplishing more in less time. By leveraging experienced HR professionals through outsourcing, organizations can free up internal HR teams to focus on initiatives that directly impact business growth, such as talent development, employee engagement, and culture-building. Routine administrative tasks, when handled externally, no longer distract from these high-value priorities. The True Cost of Administrative Overload Overburdened HR teams don’t just affect your internal operations; they impact your employees’ experience. Inconsistent onboarding can create a rocky first impression for new hires. Delayed payroll or benefits questions lead to frustration and decreased trust. Compliance oversights expose your business to fines and legal risk. Even small inefficiencies add up. According to the National Association of Professional Employer Organizations (NAPEO), organizations that leverage an outsourced HR model achieve an average ROI of 27.2% per year, saving around $1,775 per employee while paying $1,395 per employee for outsourced services. That’s not just cost savings, it’s a reinvestment in your team and your business. The Power of Strategic HR Outsourcing Outsourcing doesn’t mean giving up control or handing HR off to a faceless provider. Done strategically, it’s about extending your team. Administrative tasks like payroll, benefits, onboarding, and reporting can be handled efficiently by experts, while HR teams gain confidence that compliance requirements are being met. Most importantly, it frees internal HR to pivot from reactive, day-to-day tasks toward engagement, culture-building, and retention strategies. Outsourced HR support can scale with your business, providing additional expertise during busy periods, leaves of absence, or rapid growth phases. The impact is clear. Teams feel supported, employees feel heard, and the organization operates smarter, not harder. With the right outsourcing partner, a small HR team can act like a team of 10, and a team of five can perform like a team of 25, all while maintaining compliance and efficiency. Retention Starts With the Right Employee Experience When administrative burdens are reduced, HR teams can focus on creating meaningful experiences for employees. Transparent processes around pay, benefits, and policies build trust. Faster, more organized onboarding leaves a strong first impression. Access to modern self-service HCM tools empowers employees to manage their own information, reducing repetitive questions and improving engagement. By leveraging experienced HR professionals to handle gaps in internal processes, organizations can enhance overall employee satisfaction, ensuring every interaction, from onboarding to open enrollment, feels seamless and supportive. A Smarter Approach to HR Means a Stronger Business Across industries, companies are recognizing that HR outsourcing is no longer a luxury. It’s a strategic advantage. Organizations that adopt a blended model of technology and advisory support report measurable reductions in administrative workload, cost savings compared to maintaining fully in-house HR teams, and improved engagement for employees. Strategic HR outsourcing allows internal teams to shift from transactional tasks to big-picture initiatives, creating a more resilient, efficient, and high-performing workforce. At the end of the day, HR isn’t just a function; it’s the backbone of your organization. When it’s overextended, the entire business suffers. But with the right support, HR teams can focus on meaningful initiatives, employees feel more valued, and the business benefits from measurable ROI. Strategic HR outsourcing isn’t about replacing your team, it’s about empowering it. Your people, your culture, and your bottom line all benefit. Curious how Simco's HR Advisory services can help your business? Let's talk today.

Your Medicare Plan Is Discontinued: What’s Next?

October 14, 2025
If you recently received notice that your Medicare plan, or Medicare Advantage plan, is being discontinued, you’re not alone. Across the country (and right here in New York), insurers are scaling back or exiting less profitable markets ( Kiplinger ). While this can feel stressful, there are steps you can take to make sure your coverage doesn’t lapse and to find a better plan for your health and budget. Why Are Plans Being Discontinued? A mix of financial pressure, federal reimbursement changes, and rising health costs is driving insurers to reduce their Medicare Advantage footprints: Some major insurers are cutting back or exiting entire counties. For example, UnitedHealth announced it will discontinue its Medicare Advantage presence in 109 U.S. counties in 2026, according to Reuters . Local carriers in New York are also making changes: MVP is dropping several plans, and CDPHP is eliminating certain drug-coverage options, the Times Union explains . These shifts are happening alongside tighter government funding and increased regulatory strain. Because insurers must absorb the extra cost of covering benefits while meeting regulatory caps (for example, on prescription drug out-of-pocket limits), some plans become financially unsustainable and are discontinued ( the Kaiser Family Foundation ). Steps to Take if Your Plan Is Discontinued Here’s how to act so you don’t lose coverage: 1. Review the notice you received carefully Your insurer is required to send you a non-renewal or discontinuance notice. It often includes deadlines, whether you can enroll through a Special Enrollment Period (SEP), and what options you have. 2. Note the relevant enrollment period The Annual Enrollment Period (AEP) runs October 15 to December 7, 2025 , during which you can switch Medicare Advantage or Part D plans. If your plan was discontinued, some notices allow you to select a new plan until December 31 without penalty. In limited cases, you may qualify for a Special Enrollment Period (SEP) following the discontinuation. 3. Research your options early Don’t wait until the last minute. Compare plans available in your area. Key things to look at: Provider networks: Will your doctors still be covered? Drug formularies: Does the plan cover your medications and at what cost? Premiums, deductibles, and out-of-pocket max: These can vary significantly. Benefit trade-offs: Some plans reduce supplemental benefits (vision, dental, wellness perks) when trying to maintain financial viability. 4. Enroll in the new plan Submit your enrollment by the relevant deadline (typically December 7 for the Annual Enrollment Period (AEP). However, If your plan was discontinued, you may have until December 31 to choose a new one without penalty). Make sure the new plan starts January 1 to avoid coverage gaps. 5. If your plan wasn’t discontinued, still review Even if your current plan remains active, benefits, networks, and costs often change each year. It’s wise to compare alternatives anyway, especially after insurer shake-ups. Why Timing & Support Matter Delays cost you: Failing to enroll by deadlines could mean losing drug coverage or being locked into a less ideal plan. Support can ease the burden: Licensed agents can help you compare side-by-side, explain trade-offs, and guide you through enrollment. You deserve the best match: Everyone’s health and financial needs differ. Don’t settle for the first available option unless it truly fits. How Simco Can Help At Simco, we understand the stress of sudden plan changes. Our licensed insurance advisors are ready to: Help you interpret your discontinuance notice Compare plan options available in your area Assist with enrollment paperwork Explain benefit trade-offs and cost implications You don’t have to navigate this alone. Whether your Medicare Advantage plan was discontinued or you’re simply exploring your options, our team is here to support you. Contact us today to schedule a 1-on-1 consultation, and let us help you find the plan that keeps you covered and confident in 2026 and beyond.

Have a question? Get in touch.