News headlines pertaining to cyberattacks are becoming increasingly common. In December 2013, Target announced that sensitive information from approximately 70 million individuals had been breached, including names, mailing addresses, phone numbers and e-mails. In December 2014, Anthem, the second-largest health care insurer in the United States, announced that similar data was compromised from 78.8 million members, ex-members and employees.

As part of a growing concern over external workplace threats, the International Foundation surveyed members to gauge their concerns regarding cyberattacks, workplace violence, natural disasters, the spread of disease and more. (See 10 Ways Employers Are Prepared for the Worst.) The survey garnered responses from 179 organizations across the United States and Canada.

Not surprisingly, the top threat of greatest concern was a cyberattack, cited by 37% of respondents. An additional 25% cited an internal data security breach as their No. 1 concern. Is this anxiety new? About three in four responding organizations agree that their concern has increased in the past five years.

These concerns seem to be valid. More than 18% of respondents noted having an experience with cyber-attacks in their organization, with the same amount experiencing internal data breaches. What data are employers most concerned about being breached?

  • Worker Social Security/CPP/QPP numbers and other personal information—50%
  • Employer customer data—24%
  • Worker health data—6%
  • Employer financial data—6%
  • Worker financial information—2%

Fortunately, organizations are taking a number of preventive measures to combat breaches. These include:

  • 63% are restricting access to electronic files.
  • 44% have a “mobile device at work” policy.
  • 27% have data breach worker agreements.
  • 14% of organizations offer identity theft insurance to their workers.

In addition to these measures, many organizations are now monitoring the electronic activities of their own workers. Some of these activities include:

  • 50% of organizations monitor Internet sites visited.
  • 49% monitor computer files accessed.
  • 43% monitor e-mails sent/received.
  • 32% monitor phone usage.
  • 19% monitor social media posts.

Organizations are realizing the potential threats and taking measures to alleviate attacks. The International Foundation has taken drastic measures to ensure the cybersecurity of the organization. A recent analysis of our email system found that less than one-quarter of received emails were from legitimate sources. I’m glad those unwanted emails never make their way to my inbox, thanks to the protective measures we have in place.

[Related: Benefit Bits Video | Cyber Liability Insurance]

What action is your organization taking to prevent attacks? Are you trying anything new or innovative? Share in the comments below.

Justin Held, CEBS
Educational Program Specialist/Research Analyst at the International Foundation

Justin Held, CEBS

Educational Program Specialist/Research Analyst at the International Foundation

Favorite Foundation service: Research Surveys

Benefits related topics that interests him most: Health care economics, the Affordable Care Act, apprenticeship training

Favorite Foundation Conference Event: Lowell Catlett’s economic updates

Personal Insight: Justin loves everything baseball, visiting and checking off ballparks as he travels. He can shake any bad mood caused by a Brewers’ loss by going for a good long run.

Recommended Posts

New Mental Health Parity Guidance: More Clarity, But More Compliance Obligations

Anne Newhouse

According to speaker John Barlament, Shareholder, Reinhart Boerner Van Deuren, S.C., in his webcast “New Mental Health Parity Guidance: More Clarity, But More Compliance Obligations,” held on August 30, 2023, new guidance has been “desperately needed” on the topic of mental health […]

Legal & Legislative Reporter: Medical Provider May Not Bring Claim on Behalf of Participants and Beneficiaries

Guest Contributor

Every month, the International Foundation releases the Legal and Legislative Reporter, a compilation of new employee benefits–related case summaries. Below is a summary we thought you’d be interested in. Content provided by Morgan, Lewis & Bockius LLP. The U.S. District Court for the […]

Five Steps to Nurture Belonging in the Workplace

Guest Contributor

Benefits Magazine Extras articles provide you with bonus content on a mix of benefits topics as well as deep dives and analyses on the latest benefit trends and compliance issues. Visit to see the latest Benefits Magazine Extras as well as the bimonthly print […]

Navigating Uncertainty

Christine Vazquez, CEBS

In today’s business environment, change is constant. Earning a Certified Employee Benefit Specialist® (CEBS®) designation can help benefits professionals improve their ability to manage organizational change. The self-study CEBS courses provide critical knowledge and skills to scan the environment and strategically tailor benefit […]