For Cybersecurity Awareness Month, the Michigan Department of Insurance and Financial Services (DIFS) encouraged consumers and businesses to protect their personal and financial information from scammers and cyberattacks.
“All across the country data breaches are increasing and cybercriminals are becoming more aggressive and creative in the methods they use to obtain sensitive personal and financial information,” DIFS Director Anita Fox said. “DIFS is committed to helping Michiganders learn how protect their personal data and avoid falling victim to scams and cyberattacks.”
While some cybersecurity breaches are the work of sophisticated hackers and foreign agents targeting older adults or people who are less tech-savvy, most successful cyberattacks occur because of a failure to follow well-established cybersecurity practices, according to DIFS.
Here are some initial steps that consumers can take to protect themselves and their personal information online:
- Don’t access personal or financial information, such as bank accounts, online retail accounts, or medical records when using public Wi-Fi. Only connect to the internet over secure, password-protected networks.
- Password-protect all user accounts and devices that connect to the internet. Do not use the same password twice. Try to create a password with at least 12 characters but if the account doesn’t allow long passwords, mix uppercase and lowercase letters, numbers, and symbols to make your password strong.
- Multifactor authentication offers extra security by requiring an additional step beyond entering a password to log into your account, such as a scan of your fingerprint, retina, or face on a mobile device, a passcode via an authentication app, or security key sent via text message or email.
- Be on the lookout for phishing emails – know the sender and hover over the name to see the address. Confirm the links in the email are legitimate. Do not click on links or pop-ups, open attachments, or respond to emails from strangers. Start a new email chain or call the sender to verify that the email is legitimate. Never use your work email for personal communications.
- Never give any personal/private information such as account numbers or passwords over the phone or in a text or email. Call your financial institution directly if you ever have questions; your financial institution will never call or text you and ask you for your passwords or account access information.
DIFS said it also takes steps to ensure sound cybersecurity practices in the industries it regulates to support its mission of ensuring safe and secure insurance and financial services for Michiganders. DIFS regularly reminds financial services entities such as banks and credit unions to review, update, and test their data protection processes. Additionally, the department has set forth data security requirements for licensed insurers and producers under the Michigan Insurance Data Security Law, which requires insurance licensees to establish information security programs and notify DIFS of a cybersecurity event involving nonpublic information.