← Resources · Reviewed 2026-09-28
CMPA cyber assistance change (September 2026)
Accurate statement: effective September 25, 2026, CMPA stopped paying specified damages and settlements arising from cyber breaches. Other CMPA assistance continues. KCC is not an insurer and does not guarantee insurability.
Physician owners often ask whether “CMPA still covers cyber.” The precise answer is narrower: CMPA has changed how it assists with certain financial consequences of cyber breaches, while other forms of assistance remain available. Read the official CMPA materials rather than relying on summaries alone.
Authoritative source: CMPA / ACPM — search their current guidance on cyber-related assistance. Do not treat a CyberHealth score as proof of insurance eligibility.
Practical clinic steps: name a privacy lead, confirm incident contacts (including broker/insurer), review cyber insurance with a broker, and verify backup restore capability with your MSP or EMR vendor.