Here’s a scary reality: cyber criminals are using ChatGPT to up their game. In fact, novices are even using ChatGPT to write malware. Phishing emails? Yes, ChatGPT is writing those too. Cybersecurity experts remind us that “the bad guys” only...

  88% of small business owners fear cybersecurity threats to their businesses—and with good reason. The dramatic rise in cybercrime makes it hard to keep up with the various tactics in play, and small businesses are often without the resources...

Retirement plans contain sensitive—and valuable information. In addition to securing it, you must be ready to respond to breaches. Who are the experts on your team? What’s On Your Company’s Inventory of Sensitive Data? When your company assesses security risks...

Cybersecurity threats are deepening and spreading, with new tactics emerging every day. Smaller and midsize businesses are increasingly vulnerable, given that they are typically leaner than larger businesses, and wrapped in fewer layers of protection. Whether a cyber security breach...

Among the many dangers of big, headline making cyber attacks is distraction. At the moment, for example, while we are all busy wondering about the availability of gas, what ransomware can do, and so on, we may be putting off...

A cyber-attack is a digital assault by cyber-criminals using a technical device to sneak through private records on a single computer, multiple computers, or computer networks. Cyber-attacks can swiftly disable computers, swipe essential data, or hijack a breached computer as a launching...

Retirement plans and, specifically, their plan sponsors are being threatened more and more by cyber attacks. Recordkeepers, custodians, and third party administrators are being attacked due to all the valuable personal data they harbor and have implemented measures to guard...

Not paying attention to why a cyber breach occurred paves the path for the next cyber breach. That’s why it’s essential for retirement plan sponsors to follow up with service providers after even a minor incident. Examining the cause is...

When a participant’s 401(k) account is compromised, the aftermath is rarely straightforward. It’s bad enough that breaches target retirement funds, but they also expose sensitive personally identifiable information (PII)—like Social Security numbers, dates of birth, and home addresses—opening the door...

Fulfilling fiduciary obligations around cybersecurity requires plan sponsors to oversee a complex network of recordkeepers, payroll systems, and custodians. With so many partners involved, answering "who can access what data" is rarely straightforward. Toward improved oversight, ERISA experts suggest three...