Erie Insurance working to recover services following cybersecurity incident

Erie Insurance is actively engaged with top cybersecurity professionals to address a service disruption that has affected their customers, agents, and staff due to a cyber incident. The company acknowledges the increasingly sophisticated nature of cyber threats, emphasizing the vulnerability of even the most well-guarded systems. In response to detecting unauthorized activity, prompt steps were taken to contain the issue, leading to the implementation of enhanced security measures to fortify their infrastructure.

As of the latest update, Erie Insurance has regained control of its systems and has not detected any ransomware or ongoing malicious actions from threat actors. They are advising policyholders to adhere to standard security practices and report unusual incidents to their financial institutions. The company also alerted customers that they will not make unsolicited phone or email requests for payments and emphasized against interacting with suspicious links or divulging personal data in response to emails or calls.

In the case of initiating a claim, policyholders are encouraged to connect with their local agent or reach out to Erie Insurance’s First Notice of Loss team via 800-367-3743. The company’s Information Security team identified abnormal network activities on June 7, promptly enacting protective measures to secure their data and systems. Erie Insurance notified the Securities and Exchange Commission of the situation through a Form 8-K filing on the same day.

Erie began notifying the public of a network outage affecting all systems on June 8, with subsequent alerts on June 9 and June 10 echoing the initial message without divulging specifics about the cyber event. It wasn’t until June 11 that the company explicitly referenced “unusual network activity.” While Erie has not disclosed the identity of those responsible for the threat, Google Threat Intelligence Group’s chief analyst cautioned industry stakeholders about Scattered Spider targeting the insurance sector via social engineering tactics.

Reports from CybersecurityDive indicate Scattered Spider’s orchestrated attacks on specific industries, linking them to MGM Resorts and casino firms. The collision repair community has also noted the impact of the Erie Insurance service disruption. Industry conversations are drawing from past experiences, such as CDK’s ransomware incident, which led to system shutdowns at thousands of dealerships, affecting collision repair operations.

Business resilience planning in response to cyber threats was a focal point at the 2024 MSO Symposium, where experts discussed cross-sector implications of such disruptive events. Key insights underscored the need for a Business Continuity Plan (BCP) to guide internal communications and customer engagements during crises. The Collision Industry Conference (CIC) further explored vulnerability through a simulated cyber attack on a small repair shop, highlighting the critical importance of proactive defense measures.