29/09/2026
๐๐๐ฏ๐ฒ๐ฟ ๐ถ๐ป๐๐๐ฟ๐ฎ๐ป๐ฐ๐ฒ ๐ฒ๐ป๐พ๐๐ถ๐ฟ๐ถ๐ฒ๐ ๐ฟ๐ถ๐๐ฒ ๐ฎ๐ ๐ฎ ๐ฟ๐ฒ๐๐๐น๐ ๐ผ๐ณ ๐ฑ๐ถ๐ด๐ถ๐๐ฎ๐น ๐ฑ๐ถ๐๐ฟ๐๐ฝ๐๐ถ๐ผ๐ป
Our insurance partner TL Dallas & Co Ltd is reporting an increase in cyber liability enquiries from health and care organisations as a result of the threat of digital disruption.
Cyber attacks on businesses continue to demonstrate the potential operational, financial and regulatory consequences of a cyber incident. Care providers are increasingly aware of the potential impact of ransomware, phishing, data breaches and attacks affecting third-party technology suppliers.
TL Dallas says the increase in enquiries reflects a wider recognition that cyber risk is no longer solely an IT concern. For organisations responsible for delivering social care services, the consequences of a cyber incident can extend to operational continuity, access to information, regulatory obligations and the delivery of care.
The latest UK Government Cyber Security Breaches Survey, published in April 2026, found that 33% of health and social care businesses surveyed had identified a cyber breach or attack during the previous 12 months.
Health and care organisations can be particularly exposed because they frequently depend on digital systems to support day to day operations. These can include electronic care records, medication management, rostering, payroll, finance, communications and access-control systems.
An interruption to one or more of these systems can create additional administrative demands at a time when staff are already managing complex care requirements.
TL Dallas recommends several key areas to consider:
๐ Multi-factor authentication: Organisations need to make sure their systems are properly protected, including using two or more different types of authentication when logging into their networks or systems.
๐ Backups and recovery: Organisations should maintain appropriate backups and test their ability to restore systems following an incident.
๐ Staff awareness: Phishing and social engineering remain significant routes into organisations, making regular staff awareness training important.
๐ Supplier risk: Providers should understand how critical third-party technology and service providers are protected.
๐ Incident planning: Organisations should know who will lead their responses, how incidents will be escalated, and which specialist support may be required.
๐ Insurance review: Existing policies should be reviewed to understand the scope of cover, exclusions, conditions and applicable limits.
For advice on cyber security for your business visit https://lnkd.in/eBRYuwdh or email [email protected]
