In today’s digital environment, where a single ransomware attack can cripple hundreds of thousands of computer systems worldwide in a matter of days, most people recognize that protecting confidential information is more important than ever before. Much of today’s discussion focuses on the exposure of consumer data, like credit card numbers.

However, a shift in focus may be necessary, as hackers have turned to a more information-rich source: employee benefit plans. This article examines the threat facing benefit plans, explores the applicable legal landscape, and recommends steps to better equip plans to prepare for and manage data breaches.