Your practice runs on data. Patient charts, X-rays, insurance details, appointment schedules and payment information all live on your computers and in the cloud. If a hacker locks you out of those systems or steals patient records, you may not be able to see patients, and you could face lawsuits, regulatory investigations and costly notification requirements.
Many small practice owners assume hackers only go after hospitals and big corporations. In reality, small healthcare offices are frequent targets because:
Patient records are valuable. Health records contain names, birth dates, Social Security numbers and insurance information, which criminals can use for identity theft and insurance fraud.
Downtime is costly. If you can't access charts or scheduling software, you can't see patients. Criminals know practices are under pressure to pay a ransom quickly.
Small offices have small IT budgets. Many practices don't have a dedicated IT team, making them easier to break into.
Staff get targeted by phishing. A single convincing email can trick an employee into clicking a malicious link or wiring money to a fake vendor.
You take card payments. Copays and patient balances paid by card create another target for hackers.
A breach comes with legal obligations
As a healthcare provider, a data breach isn't just an IT problem. It triggers legal requirements:
HIPAA: if patient health information is exposed, you may need to notify affected patients and federal regulators, and you could face investigations and penalties.
Florida's data breach law: Florida requires businesses to notify affected Florida residents of a breach of personal information within a set deadline, and larger breaches must also be reported to the state Attorney General.
Payment card rules: if card data is compromised, your payment processor and the card companies can charge investigation costs, fines and assessments.
Meeting these requirements means hiring lawyers, forensic investigators, mailing services and credit monitoring providers, often within days. Without insurance, all of those costs come out of your pocket.
What AmTrust cyber insurance covers
AmTrust's cyber policy covers both the costs your practice pays directly and the claims others bring against you.
Costs to your practice:
Ransomware and cyber extortion: expenses and payments to respond to a ransom demand
Data and system recovery: restoring your computers, software and patient data after an attack
Business interruption: lost income and extra expenses while your systems are down and you can't see patients
Vendor outages: lost income when your practice management software, billing company or another supplier is hit by an attack of its own
Reputational harm: lost income when news of a breach drives patients away
Breach response: legal counsel, computer forensics, patient notification, credit monitoring and public relations
Phishing and fraud: money lost when staff are tricked by a fake email, invoice or impersonation
Cryptojacking: costs when criminals secretly use your computers to mine cryptocurrency
Claims against your practice:
Privacy and network liability: defense if patients sue after their information is exposed
Regulatory fines and penalties: coverage for government fines and penalties tied to a cyber event or privacy violation, where insurable by law
Payment card penalties: forensic costs, fines and assessments owed to card companies after a breach
Media liability: defense against claims involving content on your website, such as copyright infringement
AmTrust also offers 24/7 access to experts to help you respond when something goes wrong.
Getting a quote is quick and simple
You're busy running a practice, and you don't have time for long insurance applications. With AmTrust, there's no lengthy questionnaire or IT audit to get started. We just need a few basic details about your practice, and we can quote and bind coverage online in real time, often while you're on the phone with us.
AmTrust's cyber coverage is admitted in all 50 states, including Florida, and almost any type of business is eligible, so most dental and primary care offices can be covered in minutes.
One agency for your entire practice
Cyber is just one piece of protecting your practice. We can also handle:
General liability for patient slip-and-fall injuries and other premises claims
As an independent agency, we're not tied to one insurance company. We quote your coverage with many carriers to find the best premium and the right fit for your practice, then keep everything organized in one place.
Get a cyber quote today
We're a family-owned agency that caters to small businesses, and walk-ins are always welcome. You'll work with real people who know your practice, from your first quote to your next claim.
Coverage availability and eligibility vary by carrier and business type and are subject to underwriting approval. Consult the policy for specific terms, conditions, limits and exclusions.
Protect Your Practice with Cyber Insurance
Talk with our Jonesville team about cyber coverage for your Florida dental or medical office.