Alert & Declare: (877) 364-9393
Member Emergency Hotline
Emergency Hotline
Agility Recovery +
Agility workspace recovery and backup technology hardware
success-story

Cyberattack Recovery for an Insurance Company After a Phishing Attack

Company Profile

  • Industry: Insurance
  • Company Size: Mid-sized regional insurer (500+ employees)
  • Location: Headquarters in Chicago, with satellite offices across the Midwest
  • IT Infrastructure: Cloud-based policy management system, on-premises file servers, VoIP phone systems
  • Regulatory Compliance: SOC 2, PCI DSS, HIPAA (for health-related policies)

The Challenge: Phishing Attack Compromises Critical Systems

In early February, the insurance company fell victim to a sophisticated phishing attack targeting employees in the claims processing department. A fraudulent email, appearing to come from the company’s CFO, instructed recipients to log in to a fake security portal.

Within hours:

  • Multiple employee credentials were stolen, giving attackers access to the internal document management system.
  • Sensitive customer data (SSNs, financial details, and medical policy records) was exfiltrated.
  • The company’s email system was locked down, preventing customer service representatives from accessing important policy information.
  • VoIP phone systems were compromised, preventing inbound and outbound calls.
  • IT security shut down key systems to prevent further spread, causing a complete halt in operations.

With customer data at risk, the company needed an immediate recovery plan to continue serving policyholders and mitigate reputational damage.

The Solution: Agility’s On-Demand IT Equipment & Data Recovery to Ensure Business Continuity

The insurance company activated its Agility Recovery membership, and within hours, a comprehensive IT recovery plan was deployed:

1. Immediate Deployment of Replacement IT Equipment

  • Laptops and workstations shipped overnight to enable remote employees to resume work.
  • Pre-configured cloud-based workstations deployed to access backup systems securely.
  • Temporary secure email platform established to restore communications.

2. Secure Network & Communications Restoration

  • Dedicated VPN and satellite internet provided for secure remote access.
  • VoIP phone system replacement enabled customer service agents to assist policyholders.
  • Multi-factor authentication (MFA) protocols enforced to prevent further breaches.

3. Data Recovery & Compliance Support

Outcomes & Business Benefits

  • Operations resumed within 24 hours, preventing major revenue loss.
  • Customer support was restored, minimizing policyholder frustration.
  • No regulatory fines or penalties—compliance requirements were met.
  • Executive team used this incident to justify investment in ongoing cybersecurity resilience.

Conclusion

This phishing attack could have crippled operations for weeks, but with Agility’s on-demand technology and data recovery solutions, the insurance company recovered rapidly, protected its reputation, and minimized financial impact.

Key Takeaways:

  • Fast IT Equipment Deployment—Laptops, servers, and workstations arrived within hours.
  • Secure Connectivity Restored—VPN and satellite solutions enabled remote access.
  • Compliance & Risk Mitigation—Adherence to SOC 2, PCI DSS, and HIPAA standards.
  • Minimal Business Interruption—Operations resumed within 24 hours instead of weeks.

Related Content