Cyber risk is evolving faster than many organizations are evaluating it, extending far beyond data breaches, privacy events or network downtime. A single cyber event can now interrupt operations, create significant financial loss, affect physical assets, and raise questions about governance and leadership accountability.
2 min read
Cyber Insurance Gaps: Why Risk Leaders Need a Broader View
Topics: Commercial Risk Management Unison Risk Advisors Cyber
2 min read
Protecting Your Online Presence: Practical Steps to Reduce Personal Cyber Risk
Cyber risk is no longer just a business concern. Individuals and families are frequent targets for account takeovers, identity theft, wire fraud and social engineering scams. We encourage clients to think about personal cybersecurity as part of everyday risk management, not a one-time task.
Start With the Accounts That Matter Most
A few simple habits can go a long way. Using a password manager, turning on multi-factor authentication and adopting passkeys where available can make it harder for criminals to access your accounts. Your primary email account deserves extra attention because it is often the path to password resets and financial activity.
Reduce Exposure Across Identity, Devices and Home Technology
Identity protection matters just as much as login security. Freezing your credit with the three major bureaus can help limit fraudulent account openings. The guide also recommends requesting an IRS Identity Protection PIN, turning on bank and card alerts and considering credit protection for children, whose identities can be misused for years before anyone notices.
Your devices and home network also play a major role in personal cyber risk. Automatic software updates, device encryption, screen locks and find-my-device settings can help reduce exposure if a device is lost, stolen or targeted. At home, changing the router’s default administrator password, using strong Wi-Fi encryption and separating smart devices onto a guest network can help limit avoidable vulnerabilities.
Slow Down Urgent Requests and Build a Response Plan
Many costly cyber incidents start with pressure, not technology. Unexpected requests for money, wiring changes or account credentials should be verified through a known phone number or website, not the contact information included in the message. Families may also want to set a code word for emergencies to help identify impersonation or voice-cloning scams.
Preparation matters after an incident, too. Backups remain important for photos, tax records and other irreplaceable files. If a breach affects you, changing passwords quickly, contacting financial institutions and documenting what happened can make the response more manageable.
A Practical Place to Start
You do not need to do everything at once. Start with your email account, financial logins, credit freezes, device updates and transaction alerts. Those steps can create a stronger foundation and make the rest of the checklist easier to work through over time.
Click here to view the full checklistand download the PDFwith all eight steps and detailed action items.
Even with the right precautions, cyber incidents can happen. Personal cyber insurance can help protect your finances, identity, and peace of mind.
Reach out to your advisor to learn more or review your current coverage or view ourCyber Risk page.
Note: This communication is for informational purposes only, and is not intended to offer legal, tax, or client-specific risk management advice. Information in this communication is not meant to describe specific coverages that may be advisable or available to you or your company, or to interpret specific coverages that may already be in place. General insurance descriptions in this communication do not include complete insurance policy definitions, terms, and/or conditions, and should not be relied on for coverage interpretation. Actual insurance policies must always be consulted for full coverage details and analysis. View our privacy notice.
Topics: Personal Insurance & Risk Management Private Client Group Unison Risk Advisors Cyber
4 min read
Cybersecurity Threats Family Offices Can't Ignore
Cybersecurity is often framed as a technology issue. For family offices, it is something more personal. A cyber incident can affect finances, privacy, reputation and in some cases, physical safety.
Family offices sit at the intersection of wealth, discretion and information. They manage sensitive financial records, governance documents, personal identifiers, travel details and access to liquid capital. Many do so with lean teams and informal processes. That combination can make family offices appealing targets for cybercriminals.
The most significant cyber threats facing family offices today are not theoretical. They are practical, persistent and increasingly designed around how families live and operate.
Cybercriminals Target People, Not Just Systems
Unlike large institutions, family offices are rarely hit by broad, indiscriminate attacks. Instead, they are often targeted through social engineering, phishing and impersonation schemes that exploit trust.
Emails that appear to come from a family principal, executive assistant, or trusted advisor can prompt wire transfers, credential changes or the sharing of sensitive documents. In many cases, attackers observe communication patterns for weeks before acting. The success of these attacks has less to do with technical sophistication and more to do with human behavior.
For family offices, cyber risk often begins at the personal level through a phone call, a convincing email or a sense of urgency.
Concentrated Information Increases the Stakes
Family offices hold an extraordinary amount of information in one place. This often includes net worth statements, trust and estate documents, insurance schedules, legal agreements, medical details, travel itineraries and home addresses.
Unlike corporate data, this information is deeply personal and difficult to replace once exposed. A single breach can trigger identity theft, extortion attempts, reputational harm, legal exposure and long‑term privacy loss. For families with public profiles or operating businesses, stolen data can also be misused to support physical security threats or targeted litigation.
The risk is not just data loss. It is the loss of control over information that defines a family’s financial and personal life.
Informal Processes Create Hidden Vulnerabilities
Many family offices value flexibility and efficiency. Unfortunately, informality can also introduce cyber vulnerabilities.
Shared passwords, unsecured personal devices, limited access controls and undocumented procedures are common, particularly in smaller or growing offices. When a small group manages everything from bill pay to travel to investments, personal and professional systems can blur quickly.
Cyber incidents often occur not because risk is ignored, but because infrastructure has not kept pace with complexity.
Third‑Party Access Is a Common Entry Point
Family offices rarely operate in isolation. Attorneys, accountants, investment managers, concierge services, household staff and technology vendors often have access to sensitive information or systems.
Each additional relationship expands the attack surface. A breach does not need to originate inside the family office to cause damage. It can begin with a vendor or advisor whose security controls were never fully reviewed. Once inside, attackers may move laterally toward higher‑value targets.
Cyber resilience is often influenced by the weakest external connection.
Cyber Incidents Can Become Financial Events Quickly
Cyber events are often discussed as privacy concerns, but for family offices they can escalate into material financial events.
Unauthorized transfers, ransomware demands, fraudulent disbursements and recovery costs can add up quickly. Families may also face expenses related to forensic investigations, legal counsel, public relations support and credit monitoring. In some cases, incidents expose gaps or misunderstandings within insurance programs families assumed would respond.
Without planning, cyber risk can move from inconvenience to capital impairment with little warning.
Insurance Is an Important, but Often Misunderstood, Backstop
Many families assume cyber risk is addressed somewhere in their insurance program. Often, it is not or not in the way they expect.
Personal lines, excess liability, homeowners and business policies may address portions of cyber exposure, but coverage is frequently fragmented. Policy triggers, sublimits, exclusions and differences between personal and commercial cyber policies can leave families exposed during a loss.
At Unison, we see value in reviewing cyber insurance as part of a broader personal risk conversation rather than relying on assumptions. Aligning coverage with a family’s digital footprint, lifestyle exposure and operational structure can help clarify how risk transfer fits into the overall picture.
Cybersecurity as Personal Risk Management
Resilient family offices tend to share a common mindset. They treat cybersecurity as a component of personal risk management, alongside insurance, privacy, liability, governance and continuity planning.
Access is intentionally limited. Information sharing is deliberate. Roles are defined in advance. Insurance programs are reviewed regularly. Responsibility is clear before an incident occurs, not during one.
This approach does not remove risk, but it helps preserve options and control when something goes wrong.
Final Thought: Cyber Risk Is a Family Risk
Cyber incidents rarely stay contained. They can affect spouses, children, family businesses, reputations and long‑standing relationships. For family offices, cybersecurity is not about technology alone. It is about protecting people, privacy and long‑term stability.
Families that acknowledge this reality and plan accordingly are better positioned to navigate an increasingly digital and increasingly adversarial environment.
