
Jonathan C. Krowicki, Agency Manager
I’ve heard that sentence more times than I can count when talking about cyber risk with funeral home owners.
For a long time, cyber liability insurance was viewed as optional. Property coverage was essential. General liability was obvious. Auto, workers compensation, professional liability–all part of responsible ownership.
Cyber coverage was different. Too many owners believed their firm was simply too small to be a target.
I can tell you from personal experience, that mindset is no longer safe.
Over the past few months, I’ve been directly involved in helping funeral homes respond to serious cyber incidents. These were not large consolidations or high-profile operations. They were local firms serving their communities.
In one case, a cybercriminal quietly inserted themselves into an active email conversation between the funeral home and a family. Payment instructions were altered and funds were redirected. By the time anyone realized what had happened, the money was gone.
In another situation, a ransomware attack locked access to years of electronic records–case files, financial information and operational history that the firm depended on every day. Think about going back to pen and paper until you replace or reset your software!
These are not theoretical risks. They are real events affecting funeral homes right now.
Our profession handles extraordinarily sensitive information. Social Security numbers. Financial account details. Preneed contracts. Medical and vital statistics. Family contact information in our various funeral management systems. At the same time, we rely heavily on digital systems that must function without interruption. When access to platforms like the Electronic Death Registration System is disrupted, filings are delayed and families feel the impact immediately.
Funeral home websites also create new exposure. Online obituaries, flower ordering, memorial donations, guestbooks and payment portals are now expected by the public. Each convenience adds another connection point that cybercriminals can attempt to exploit.
Funeral homes are no longer low-tech operations. We are connected businesses managing high-value data in emotionally charged situations.
One of the biggest surprises for many owners is how affordable cyber liability insurance can be. For a relatively modest premium, policies can provide forensic IT support, data restoration, required notifications, credit monitoring, legal defense, business interruption protection, ransomware response and even public relations assistance.
What makes cyber events particularly challenging in funeral service is that criminals often succeed not by defeating technology, but by exploiting human behavior–urgency, trust, distraction and assumptions. These are pressures funeral professionals deal with every single day.
Basic safeguards can make a meaningful difference. Verify changes in payment instructions by calling a known number. Review email addresses carefully for subtle changes. Use multi-factor authentication. Limit administrative access. Train staff to recognize phishing attempts. Maintain secure backups that cannot be easily compromised.
If an incident does occur, the response must be immediate and coordinated. Disconnect affected systems, contact your cyber carrier or agent, engage qualified experts, preserve evidence and communicate thoughtfully with families and staff.
Funeral homes have always prided themselves on preparation. We plan for storms, liability exposures, vehicle accidents and building losses.
Cyber risk now deserves the same level of attention.
In my experience, the greatest vulnerability today is not outdated technology. It is the belief that “it won’t happen to us.”
Because I have now seen firsthand that it can.