Consulting and commercial insurance options to protect your business.

If you recently received notice that your Medicare plan, or Medicare Advantage plan, is being discontinued, you’re not alone. Across the country (and right here in New York), insurers are scaling back or exiting less profitable markets ( Kiplinger ). While this can feel stressful, there are steps you can take to make sure your coverage doesn’t lapse and to find a better plan for your health and budget. Why Are Plans Being Discontinued? A mix of financial pressure, federal reimbursement changes, and rising health costs is driving insurers to reduce their Medicare Advantage footprints: Some major insurers are cutting back or exiting entire counties. For example, UnitedHealth announced it will discontinue its Medicare Advantage presence in 109 U.S. counties in 2026, according to Reuters . Local carriers in New York are also making changes: MVP is dropping several plans, and CDPHP is eliminating certain drug-coverage options, the Times Union explains . These shifts are happening alongside tighter government funding and increased regulatory strain. Because insurers must absorb the extra cost of covering benefits while meeting regulatory caps (for example, on prescription drug out-of-pocket limits), some plans become financially unsustainable and are discontinued ( the Kaiser Family Foundation ). Steps to Take if Your Plan Is Discontinued Here’s how to act so you don’t lose coverage: 1. Review the notice you received carefully Your insurer is required to send you a non-renewal or discontinuance notice. It often includes deadlines, whether you can enroll through a Special Enrollment Period (SEP), and what options you have. 2. Note the relevant enrollment period The Annual Enrollment Period (AEP) runs October 15 to December 7, 2025 , during which you can switch Medicare Advantage or Part D plans. If your plan was discontinued, some notices allow you to select a new plan until December 31 without penalty. In limited cases, you may qualify for a Special Enrollment Period (SEP) following the discontinuation. 3. Research your options early Don’t wait until the last minute. Compare plans available in your area. Key things to look at: Provider networks: Will your doctors still be covered? Drug formularies: Does the plan cover your medications and at what cost? Premiums, deductibles, and out-of-pocket max: These can vary significantly. Benefit trade-offs: Some plans reduce supplemental benefits (vision, dental, wellness perks) when trying to maintain financial viability. 4. Enroll in the new plan Submit your enrollment by the relevant deadline (typically December 7 for the Annual Enrollment Period (AEP). However, If your plan was discontinued, you may have until December 31 to choose a new one without penalty). Make sure the new plan starts January 1 to avoid coverage gaps. 5. If your plan wasn’t discontinued, still review Even if your current plan remains active, benefits, networks, and costs often change each year. It’s wise to compare alternatives anyway, especially after insurer shake-ups. Why Timing & Support Matter Delays cost you: Failing to enroll by deadlines could mean losing drug coverage or being locked into a less ideal plan. Support can ease the burden: Licensed agents can help you compare side-by-side, explain trade-offs, and guide you through enrollment. You deserve the best match: Everyone’s health and financial needs differ. Don’t settle for the first available option unless it truly fits. How Simco Can Help At Simco, we understand the stress of sudden plan changes. Our licensed insurance advisors are ready to: Help you interpret your discontinuance notice Compare plan options available in your area Assist with enrollment paperwork Explain benefit trade-offs and cost implications You don’t have to navigate this alone. Whether your Medicare Advantage plan was discontinued or you’re simply exploring your options, our team is here to support you. Contact us today to schedule a 1-on-1 consultation, and let us help you find the plan that keeps you covered and confident in 2026 and beyond.

In today’s digital-first world, small and mid-sized businesses are just as vulnerable, if not more so, than large corporations when it comes to cyberattacks. Limited budgets, fewer in-house IT resources, and the perception of being “too small to target” often leave business owners dangerously exposed. The reality? Hackers don’t discriminate based on size; they look for the easiest entry points. Here are the top five mistakes businesses make, how to avoid them, and what steps you can take today to protect your company, your employees, and your bottom line. 1. Relying on Weak or Outdated Passwords Passwords are often the first line of defense, and also the weakest. Too many businesses rely on simple or reused passwords that can be cracked in seconds with modern tools. The Modern MFA Landscape While passwords remain standard, multi-factor authentication (MFA) has become the new baseline. However, how you implement MFA matters: Avoid email for MFA codes. If a phishing attack compromises an employee’s inbox, bad actors can intercept the code and access sensitive systems. SMS is better but not bulletproof. Text messages provide an extra layer of security but can still be intercepted. Authenticator apps are the gold standard. Tools like Authy, Microsoft Authenticator, or Google Authenticator create time-based one-time codes that aren’t tied to email or SMS. Forward-looking companies are also exploring passwordless authentication, a model that reduces dependence on static credentials altogether. Until then, tightening password hygiene and upgrading MFA methods should be immediate priorities. 2. Overlooking Employee Training Even the most advanced cybersecurity tools can’t stop an employee from clicking a malicious link or downloading infected files. Human error remains the biggest vulnerability in most organizations. What Employees Need to Know Instead of broad, once-a-year sessions, ongoing training should focus on real-world risks employees face daily. Consider including: How to spot suspicious links and attachments Why “urgent” or “CEO fraud” emails are red flags Safe internet practices for remote or hybrid workers How to report suspicious activity without fear of blame Building a Culture of Cyber Awareness Cybersecurity isn’t just an IT issue; it’s a company-wide culture. Leadership should model secure behavior and celebrate employees who catch threats. Over time, security becomes second nature rather than an afterthought. 3. Neglecting Regular Software Updates Software vendors release updates for a reason: to fix vulnerabilities. Delaying or ignoring these updates gives hackers a direct pathway into your systems. The Risk of Outdated Systems Running outdated operating systems, browsers, or applications often leaves “open doors” attackers can exploit. Businesses that don’t patch quickly enough have been at the center of major breaches. Automating updates or assigning a designated IT contact for patch management ensures vulnerabilities are closed before they can be exploited. Even for smaller businesses without dedicated IT staff, outsourced providers or managed IT services can fill this role affordably. 4. Failing to Prepare an Incident Response Plan (IRP) Too many businesses wait until a breach happens to figure out how to respond. By then, panic sets in, time is lost, and the financial damage increases. Why an IRP Matters An Incident Response Plan is essentially a playbook for what your business will do in the first 24–72 hours after an attack. It should outline: Who is responsible for containment and communication Steps for isolating affected systems Legal or regulatory reporting requirements How to restore backups and resume operations Tip: Run Cybersecurity Fire Drills Just like fire drills, businesses should run simulated cyber incidents. Testing your IRP helps employees understand their roles and uncovers gaps before a real attack occurs. 5. Assuming Insurance Alone Is Enough Some business owners mistakenly believe their general liability insurance will cover cyber-related losses. Unfortunately, most policies exclude data breaches, ransomware, or social engineering scams. The Role of Cyber Liability Insurance Cyber liability insurance fills these gaps by covering costs like forensic investigations, customer notifications, legal fees, regulatory fines, and even ransom payments (where legal). For small businesses, this coverage can mean the difference between survival and bankruptcy after a breach. But insurance should never replace prevention. Instead, think of it as a financial safety net that complements strong security practices, not one that replaces them. Click here to learn more about how Simco’s Commercial Insurance team can help protect your business with cyber and data breach coverage and beyond. Secure Your Business for the Future Cybersecurity is no longer optional for businesses; it’s a core part of protecting your employees, customers, and reputation. By addressing these five common mistakes, you’ll not only reduce your risk of an attack but also build trust with clients who want assurance that their data is safe in your hands. Taking proactive steps now, including strengthening authentication, investing in training, creating an IRP, and supplementing with cyber liability insurance, can save untold amounts of money, stress, and reputational damage later.