Data Breach Notice

When it happens, you feel powerless. You get an email or letter from a business saying someone breached your data. It happens all too often today.

Data breaches happen at banks, online sites like Facebook, and ecommerce stores. Not only that, but governments are also victims. This leaves things like your address, SSN, and credit card details exposed to thieves.

A business getting hacked is something you have little control over. But you can take important steps afterwards. We’ve outlined the most important things to do below. These steps can help you mitigate the financial losses.

Change Your Passwords

The very first thing you should do is change your passwords. Change the password for the service that sent you the breach notification first. Then, change it for any logins using the same password.

This is one of the reasons it’s a best practice to use unique logins for every site. Many people get in the habit of using the same password in several places. This leaves more than the single breached login at risk. Use a password manager to help you create strong passwords. You only need to remember one to access all the others.

Enable Multifactor Authentication (MFA)

Multifactor authentication can keep accounts secure, even if a hacker stole the password. Enable it for the breached service. Then, ensure you have MFA activated for all other logins, where possible. MFA is also called two-factor authentication or two-step verification.

Common forms of MFA are:

Text message

Authentication app

Security key

Image

Check Your Bank Accounts

If payment card details were breached, check bank accounts. You’ll want to watch these for several weeks for fraudulent charges. Report the breach to your bank to have them issue you a new card, if needed.

Notify your bank about the 3rd party data breach. This can help keep you from being held responsible for fraudulent charges. It’s good to get out ahead of it. Your bank can then help you with appropriate steps to avoid fraud.
Image

Freeze Your Credit

Online criminals will often sell breached personal details. These details can enable someone to take out credit in your name. Contact the three credit agencies. They each have ways to freeze your credit to protect you. You can do this right on their websites.

The three credit agencies are:

Equifax
Experion
TransUnion

Carefully Review the Breach Notification

It’s important to understand exactly how the data breach may impact you. Review the notice you received. Additionally, look for updates on the company website.

These are the things you should be looking for:
The type of data exposed (passwords, card numbers, etc.)
What reparations the company is making (e.g., credit monitoring)
Any instructions given to secure your account

Regularly check the company’s website. Often, they don’t immediately know how far reaching the breach is. You may check back later and find out other types of sensitive data were exposed.

Get Good Cybersecurity Options

Make sure you protect your device and network. There are some simple tools you can use to beef up personal device security. These include:

A good antivirus/anti-malware program
DNS filtering to block malicious sites
Email spam filtering for phishing

Another good protection you can use is a VPN. This helps mask your traffic. It is especially helpful if you’re using a public Wi-Fi. VPNs are easy to use. You can use VPNs for both computers and mobile devices.

Be on the Lookout for Phishing Scams

Emails are often exposed in data breaches. This means you may receive an uptick in phishing emails. Phishing is very convincing since criminals have AI at their disposal. Phishing emails often are hard to spot from the real thing.

Stay ultra-aware of any unexpected emails. Follow best practices to avoid becoming a phishing victim:

Hover over links to see them
Go to websites directly
. Don’t click email or SMS links
Beware of unknown senders
Watch for phishing on social media and text messages
When in doubt, double check through an official source

Make Sure to Update Software and Systems

Hackers often exploit unpatched vulnerabilities. How do you get unpatched vulnerabilities? Most times it’s from failing to keep software updated.

Make sure to update your device operating system. Update all apps or software on your devices. Update firmware for routers and printers. Update firmware for smart devices.

There are so many updates we need to do with our electronics. Automating your updates is a good way to stay protected.

Managed Security Services You Can Count On

The cashless revolution is here. It’s time for small businesses to embrace it. By adopting digital payments, you can enhance your customer experience as well as improve efficiency and reduce costs.

As your trusted IT partner, we're here to support you every step of the way. Let's make the transition to cashless payments a seamless one for your business.

Reach out by phone or email to schedule a chat today.

Decoding Cyber Insurance: What Policies Really Cover (and What They Don't)

CrossNewsletter

July 16, 2025•2 min read

Decoding Cyber Insurance: What Policies Really Cover (and What They Don’t)

Cyber threats aren’t just a worry for big corporations. Today, small to medium businesses (SMBs) are prime targets — with phishing, ransomware, and data breaches happening daily. For Newcastle businesses, having a safety net like cyber insurance is more essential than ever. But not all policies are created equal.

At Crossover IT, we help SMBs in Newcastle understand what cyber insurance really covers, what it leaves out, and how to build a robust security posture around it.

Why Cyber Insurance Is Crucial for SMBs

Recent reports show nearly half of all cyberattacks target small businesses. With the average cost of a breach nearing $3 million, recovering without support can be nearly impossible. Cyber insurance helps your business bounce back by covering financial losses, legal costs, and sometimes even public relations services.

What Does Cyber Insurance Usually Cover?

A solid cyber policy typically includes two parts:

1. First-Party Coverage

Protects your business directly after a cyberattack. It may include:

Breach investigation and notification costs
Data restoration and recovery
Lost revenue due to downtime
Extortion or ransomware payments
Crisis communications and PR

2. Third-Party Liability Coverage

Protects you from claims by others affected by your breach, like customers or partners. It often covers:

Legal defense fees
Settlements or court-ordered damages
Fines and penalties related to data privacy laws
Media liability for defamation or copyright issues

What’s Usually Excluded from Cyber Insurance?

Cyber policies have fine print you need to check. Common exclusions include:

Existing breaches that started before you bought the policy
Employee-caused (insider) threats unless specifically added
Negligence, like poor password practices
Acts of war or government-sponsored attacks
Long-term reputational damage or lost future revenue

Tip: Always read the exclusions carefully, and work with an experienced broker who understands your industry.

How to Choose the Right Policy

Cyber insurance is not one-size-fits-all. Here’s how to pick the right coverage:

Assess your risks: Identify where your business is most vulnerable.
Review the limits: Make sure your coverage amounts match your risk exposure.
Ask about add-ons: Consider social engineering coverage or technology errors and omissions (E&O).
Check requirements: Many insurers will expect you to have security basics in place, like Multi-Factor Authentication (MFA).
Work with a professional: Your MSP can help you evaluate your security posture before you apply.

Cyber Insurance + Good Cyber Hygiene = Peace of Mind

Cyber insurance is not a replacement for cybersecurity — it’s a backstop. Even the best policy can’t save you if you haven’t secured your systems. Combine insurance with strong defenses like MFA, employee training, and regular vulnerability assessments.

At Crossover IT, we support SMBs in Newcastle with cybersecurity best practices and help you prepare for policy requirements to keep your coverage active.

Need help decoding your cyber insurance or improving your security posture?
Contact Crossover IT — the trusted MSP for SMBs in Newcastle — to make sure your business is protected from every angle.

Neil Howell

Back to Blog