Cybersecurity Resources

Did you know?

• From March 2024 to March 2025, almost half of healthcare organizations experienced at least one data incident, such as a ransomware attack, hacking or phishing attack. The number of providers reporting over $200,000 in losses quadrupled in the same year.¹
  
• Attacks on independent providers have risen 6x since 2021.²
  
• In one cyber claim handled by TDIC, the total costs to conduct a forensic IT investigation, get systems back online and cover lost business neared $100,000. 

Is your dental practice at risk?

Practice owners often have a false sense of cyber safety, imagining that hackers go after larger targets. The reality is that healthcare organizations of all sizes have the lucrative data that hackers seek.

Helpful Resources

• Cybercrime and Your Dental Practice. Read what TDIC’s risk management experts have to say about common cyberthreats facing dental practices today.
• Why Your Dental Practice Needs Cybersecurity. Learn the importance of investing practice resources to prevent and protect against cybercrime.
• Cybersecurity Reference Guide. Sign in to download a comprehensive overview of risks and targets, data breaches and cyberattacks and guidance to mitigate risks. 
  
  
  ^{1 2025, Netwirx. 2 2025, Patient Protect.}

Did you know?

• Health care and public health was the top sector targeted for cyberthreats in 2025.³
• The healthcare sector has also been the #1 costliest industry for data breaches for 14 straight years.⁴
• Medical records sell for 10x the value of stolen credit cards because they never expire. And AI has amplified per-record exploitation value by 18–30%.⁵

Is your dental practice prepared for a cyberattack?

Robust cybersecurity involves regular staff training on recognizing and mitigating potential cyber threats, investing in reliable cybersecurity software, encrypting sensitive data and maintaining secure backups.

Helpful Resources

• Ransomware on the Rise. Read about emerging issues in dentistry and the steps needed to protect your practice and systems from cyber disruption.
• Navigating the risks of AI-enhanced Dentistry. Hear our analysts’ guidance on the utilization of AI, risk exposures and limiting malpractice liabilities.
  
  
  ^{3 2025, IC3/FBI Annual Report. 4 2026, HIPAA Journal. 5 2025, Patient Protect.}

Did you know?

Despite the rising threat and potentially catastrophic costs of cybercrime, many small business owners are not prepared to financially or operationally recover.

• The average cost per patient whose data is compromised in a breach is $429, the highest amount of any sector.⁶
• While small businesses are increasingly making investments in cybersecurity, most are still under-protected. As of 2025, 51% of small businesses has no cybersecurity measures in place at all.⁷
• Less than 20% of small businesses have some form of cyber insurance coverage.⁸

Do you have adequate protection?

Consistent cybersecurity protocols in your dental practice can help mitigate cyber risks. However, when it comes to mitigating the damage when an incident occurs, the value of a cyber liability insurance policy cannot be overstated.

TDIC agents note that many practice owners mistakenly assume that losses from cyber incidents will be covered by their commercial property policy. Since cyber coverage is not a standard inclusion, owners could face a significant coverage gap. Contact your advisor to request a review of your current coverage and review your options.

Helpful Resources

• Cyber Suite Liability insurance. Learn more about the comprehensive coverage that’s available to TDIC Business Owner’s policyholders. 
• Cyber Liability Insurance is a Necessity for Dental Practices. Read more about cyber coverage, how it protects you and what to look for in a policy.
• Data Backup and Cybersecurity Software for Dental Practices. See how software and data backup work together with a cyber liability policy as part of your practice’s prevention and recovery plan. 
  
  
  ^{6 2026, Patient Protect. 7 2025, StrongDM. 8 2026, CPA Practice Advisor.}

Did you know?

• In health care, the average time to identify and contain an incident is 279 days, the longest among industries.⁹
• Recovery from a breach continues after containment – from normalizing operations and meeting compliance obligations to restoring patient trust and putting new controls in place. The hard work of recovery can take months or even years.¹⁰

Does your practice have a cyberattack response plan?

Along with preventative and protective measures, you must also be ready with a cyber incident response plan.

TDIC policyholders can sign in to download a Cybersecurity Action Plan to guide next steps immediately after a cyberattack or data breach.

Cyberattacks disrupt normal business operations. If your practice systems are affected and you are unable to see patients, be prepared to handle patient emergencies:

• Make arrangements with colleagues in the surrounding area who might be able to accommodate emergency referrals or who are willing to accept a temporary time-sharing arrangement to occupy their office off hours so you can resume at least partial patient care until your office is operational.
• If referring patients to another colleague, document discussions with patients and the course of action taken, such as prescribing medications, referring to colleagues, advising going to the nearest hospital, etc.
• If a patient was referred to another colleague, follow up on the status of the referral to determine if the patient was seen and, if so, the services rendered.
  
  
  ^{9 2026, HIPAA Journal. 10 2026, IBM Cost of a Data Breach Report.}