12 September 2025
During 2025, we have seen a large number of well known, British retail institutions hit by cyber attacks. The resultant impact to many of these together with their customers, suppliers and partners has been considerable.
These attacks disrupt business operations, payments, customer data and in addition affect public confidence costing some companies millions of pounds when trying to recover from the attack whilst at the same time working hard to retain their customers.
Verlingue can help navigate and support you if the unthinkable becomes the reality. We have supported a number of clients through this whole journey and here are some brief insights just in case.
What to do today
- Appoint a key contact to co-ordinate matters both internally and externally in the event of a Cyber incident as part of your Business Continuity plan. Have in place a non work email address and mobile number which can be used by internal key contacts if work systems are potentially compromised.
- Consider and agree an alternate key contact in the event that your primary contact above is unavailable.
- Have to hand the 24 hour helpline number and policy number for your Cyber Insurer and for your broker. This should be easily accessible and have a hard, physical copy stored elsewhere in case your systems are affected and/or offline
- Agree who in the business should be contacted as part of the co-ordination committee in the event of a potential data breach and/or cyber attack.
What to do if you become aware of a potential data breach and/or cyber attack
- Contact your Cyber emergency helpline immediately for notification and assistance.
- Notify Verlingue to advise of the incident, providing as much information as possible as to what has happened, the impact to your business and key contact for liaison
- Establish and retain a timeline of events starting with when you first become aware or noticed any unusual activity
- Ensure that you comply with all legal and regulatory requirements such as notification to the ICO within 72 hours of a known or suspected data breach in conjunction with your insurers as a part of an agreed action plan.
- Retain all forensic evidence.
Verlingue and its dedicated claims team are here to help and support you our clients in the event of an insured loss. If you would like any further information, please do not hesitate to get in touch.
This information is for general information only. Cover is subject to insurers policy terms, conditions, and exclusions.