Philadelphia Insurance Companies (PHLY)

Philadelphia Insurance Companies (PHLY) is grappling with a ‘major’ ransomware attack, forcing a multi-day network outage now in its third consecutive day. Employees have been barred from accessing the company’s systems, indicating severe operational disruption. The attack has likely encrypted critical data, crippling core business functions such as policy management, claims processing, and customer service. Given the prolonged downtime and the insurer’s reliance on digital infrastructure, the incident threatens financial losses from halted transactions, reputational damage due to public exposure, and potential regulatory scrutiny for failing to safeguard sensitive policyholder data. The term *‘major’* suggests the attackers may have exfiltrated data before encryption, increasing the risk of leaks or extortion demands. Recovery efforts are presumably underway, but the extended outage signals deep systemic compromise, raising concerns about long-term trust erosion among clients and partners.

Source: https://www.theinsurer.com/cyber-risk/news/exclusive-philadelphia-insurance-companies-facing-major-ransomware-attack-2025-06-12/

TPRM report: https://www.rankiteo.com/company/philadelphia-insurance-companies

"id": "phi0892108091625",
"linkid": "philadelphia-insurance-companies",
"type": "Ransomware",
"date": "5/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'insurance',
                        'location': 'Philadelphia, Pennsylvania, USA',
                        'name': 'Philadelphia Insurance Companies (PHLY)',
                        'type': 'insurance company'}],
 'date_publicly_disclosed': '2025-06-12',
 'description': 'Philadelphia Insurance Companies (PHLY) has been hit by a '
                "'major' ransomware attack, causing a multi-day outage. Staff "
                'have been ordered not to access the insurer’s network as the '
                'company deals with the incident, which has entered its third '
                'day of disruption.',
 'impact': {'downtime': '3+ days (ongoing as of 2025-06-12)',
            'operational_impact': 'Staff unable to access network; business '
                                  'operations disrupted',
            'systems_affected': ['insurer’s network']},
 'investigation_status': 'ongoing (as of 2025-06-12)',
 'references': [{'date_accessed': '2025-06-12', 'source': 'SC Media'}],
 'response': {'containment_measures': ['employees ordered not to access '
                                       'network']},
 'title': 'Major Ransomware Attack on Philadelphia Insurance Companies (PHLY)',
 'type': 'ransomware'}