American Association of State Compensation insurance Fund
Canada and USAFind a Member
North America Map Yukon British Columbia Alberta Saskatchewan Manitoba Ontario New Brunswick Prince Edward Island Nova Scotia Maine Washington Oregon Idaho Montana Wyoming North Dakota Minnesota New York Rhode Island California Utah Colorado Missouri Kentucky Ohio Pennsylvania Maryland Arizona New Mexico Oklahoma Texas Louisiana South Carolina Hawaii

Magnifying GlassSelect a state or province from the map above to get primary contact and web information for any
member fund.

CopperPoint Mutual Insurance Company
Phone: (602) 631-2000
Address: 3030 North Third Street
Phoenix, AZ   85012

State Compensation Insurance Fund
Address: 333 Bush Street
Suite 800
San Francisco, CA   94104

Pinnacol Assurance
Phone: (303) 361-4000
Address: 7501 East Lowry Boulevard
Suite 800
Denver, CO   80230-7006

Hawaii Employers' Mutual Insurance Co. Inc.
Phone: (808) 524-3642
Address: 1100 Alakea Street
Suite 1400
Honolulu, HI   96813

Idaho State Insurance Fund
Phone: (208) 332-2100
Address: 1215 West State Street
P.O. Box 83720
Boise, ID   83720-0044

Kentucky Employers Mutual Insurance
Phone: (859) 425-7800
Address: 250 West Main Street Suite 900
P.O. Box 83720
Lexington, KY   40507-1724

Louisiana Workers' Compensation Corporation
Phone: (225) 924-7788
Address: 2237 South Acadian Thruway
P.O. Box 83720
Baton Rouge, LA   70808

Maine Employers Mutual Insurance Company (MEMIC)
Phone: (207) 791-3300
Address: 261 Commercial Street
P.O. Box 11409
Portland, ME   04104

Chesapeake Employers’ Insurance Company
Phone: (410) 494-2000
Address: 8722 Loch Raven Boulevard
P.O. Box 11409
Towson, MD   21286-2235

SFM Mutual Insurance Company
Phone: (952) 838-4200
Address: 3500 American Boulevard West Suite 700
P.O. Box 11409
Bloomington, MN   55431-4434

Missouri Employers Mutual Insurance
Phone: (800) 442-0590
Address: 101 N Keene St
P.O. Box 11409
Columbia, MO   65201

Montana State Fund
Phone: (406) 495-5015
Address: 855 Front Street
P.O. Box 4759
Helena, MT   59604-4759

New Mexico Mutual Group
Phone: (505) 345-7260
Address: 3900 Singer Boulevard NE
P.O. Box 4759
Albuquerque, NM   87109

New York State Insurance Fund
Phone: (212) 312-7001
Address: 199 Church Street
P.O. Box 4759
New York, NY   10007

Workforce Safety and Insurance
Phone: (701) 328-3800
Address: 1600 East Century Avenue Suite 1
P.O. Box 4759
Bismarck, ND   58506-5585

Ohio Bureau of Workers Compensation
Phone: (800) 644-6292
Address: 30 West Spring Street
P.O. Box 4759
Columbus, OH   43215-2256

CompSource Mutual Insurance Company
Phone: (405) 232-7663
Address: 1901 North Walnut Ave.
P.O. Box 53505
Oklahoma City, OK   73152-3505

State Accident Insurance Fund (SAIF)
Phone: (503) 373-8000
Address: 400 High Street SE
P.O. Box 53505
Salem, OR   97312-1000

Pennsylvania State Workers Insurance Fund
Phone: (570) 963-4635
Address: 100 Lackawanna Avenue
P.O. Box 5100
Scranton, PA   18505-5100

Beacon Mutual Insurance Company
Phone: (401) 825-2667
Address: One Beacon Centre
P.O. Box 5100
Warwick, RI   02886-1378

South Carolina State Accident Fund
Phone: (803) 896-5800
Address: P.O. Box 102100
P.O. Box 5100
Columbia, SC   29221-5000

Texas Mutual Insurance Company
Phone: (800) 859-5995
Address: 6210 East Highway 290
P.O. Box 5100
Austin, TX   78723-1098

Workers Compensation Fund
Phone: (800) 446-2667
Address: 100 West Towne Ridge Parkway
P.O. Box 2227
Sandy, UT   84070

Washington Department of Labor and Industries
Phone: (360) 902-5800
Address: P.O. Box 44001
P.O. Box 2227
Olympia, WA   98504-4001

Wyoming Division of Workers Safety & Compensation
Phone: (307) 777-7159
Address: Cheyenne Business Center
1510 East Pershing Boulevard
Cheyenne, WY   82002

Workers Compensation Board - Alberta
Phone: (780) 498-3999
Address: 9925-107 Street
P.O. Box 2415
Edmonton, AB   T5J 2S5

Workers Compensation Board of British Columbia (WORKSAFEBC)
Phone: (604) 273-2266
Address: P.O. Box 5350 Station Terminal
P.O. Box 2415
Vancouver, BC   V6B 5L5

Manitoba Workers Compensation Board
Phone: (204) 954-4321
Address: 333 Broadway
P.O. Box 2415
Winnipeg, MB   R3C 4W3

Phone: (506) 632-2200
Address: 1 Portland Street
P.O. Box 160
Saint John, NB   E2L 3X9

Workers Compensation Board of Nova Scotia
Phone: (902) 491-8999
Address: 5668 South Street
P.O. Box 1150
Halifax, NS   B3J 2Y2

Prince Edward Island Workers Compensation Board
Phone: (902) 368-5680
Address: 14 Weymouth Street
P.O. Box 1150
Charlottetown, PE   C1A 7L7

Saskatchewan Workers Compensation Board
Phone: (306) 787-4370
Address: 200 - 1881 Scarth Street
P.O. Box 1150
Regina, SK   S4P 4L1

Puerto Rico State Insurance Fund Corporation
Phone: (787) 793-5959
Address: G.P.O. Box 365028
P.O. Box 1150
San Juan, PR   00936-5028
Tools for Members

Member Home

Member Connection: A member-only forum where you can post questions and ideas.

Stat Book: A highly functional analytical tool that provides valuable comparative benchmarking results from among our members who participate.

Online Directory: Get connected with your counterparts through this comprehensive list of AASCIF members with updated phone number, email and website information.

Associate Member Lookup

AASCIF Newsletter

Would Your Employees "Take the Bait"?

How one communications campaign made sensitive data more secure

By Liz Johnson, Senior Communications Specialist, Pinnacol Assurance

Since 2015, in at least three instances, third parties have illegally gained access to sensitive data via targeted phishing attacks on employee email accounts in workers’ compensation funds, and experts believe future attacks are inevitable.

Phishing takes the form of deceptive emails attempting to trick recipients into disclosing sensitive or confidential information, opening an infected attachment, or clicking on a compromised web link. Sometimes the phishing email address is purposely created to look like it is from a legitimate or known email account.

In 2016, Pinnacol Assurance identified a cybersecurity risk when nearly 40 percent of employees “took the bait” and failed to recognize and report a mock phishing attack deployed by the company’s cybersecurity team as a baseline test. Employees needed help to recognize increasingly sophisticated phishing scams and help mitigate potentially devastating business consequences.

What’s on the line?

The legal and financial liabilities of cyberattacks are just one way businesses can be impacted. Companies working in Workers’ Compensation handle especially sensitive data (medical records including information about current and past conditions and treatments, payroll data, social security numbers, etc.) and must manage both confidential and non-confidential data appropriately. Pinnacol’s networks house vast amounts of customer data, and keeping that data secure is part of Pinnacol’s commitment to caring for its customers.

Although data breach and cyber liability insurance covers some financial liability, consumer confidence and brand reputation is also on the line.

When it came to phishing, relying on technology protections like email filters and network firewalls wasn’t enough. Employees needed to be engaged as the first line of defense against phishing.

A “school” of colleagues get on board

To tackle the phishing problem, Pinnacol’s IT team partnered with communications colleagues. While some companies use policies and disciplinary action to manage phishing risk, the Pinnacol project team took an innovative, preventative, and positive approach.

“This was a serious issue that threatened our data security, so I understood the gravity of the situation,” said Michelle Barnes, internal communications specialist. “But I also knew that capturing employees’ attention in a world of distractions is a challenge. So, why not have some fun with it?”

With a focus on the business problem, goals, and measurable objectives, Barnes pitched the idea of an internal communications campaign to combat the problem in a funny, attention-grabbing way.

With the support of the project’s executive sponsor, AVP of Information Technology Brian Lindley, Barnes developed a communications plan with engaging tactics that would deliver on the overall goals of employee education and changed behaviors.

“When it was all said and done, we only spent $6,000 on communications materials for the campaign, much less than the costs—reputational and otherwise—of a customer data breach,” said Barnes.

Here fishy, fishy…

The campaign included tactics to increase employees’ awareness of phishing and the dangers it poses—including a specialized graphic and tagline: “Don’t take the bait. Recognize and report phishing attacks.” Other tactics included an intranet page with a humorous video, a computer monitor card to keep phishing top-of-mind, posters, and a lobby launch event. Employees took a required online training class and completed a short quiz. Additionally, a “Phish Alert” button was added to employees’ Microsoft Outlook toolbar, enabling them to quickly delete and report potential phishing emails (and to delete unwanted spam emails).

After the campaign, the cybersecurity team deployed another simulated phishing attack that tested how well employees could recognize and report a phishing attack threat. Cybersecurity scheduled subsequent quarterly mock phishing emails to further assess the campaign’s impact.

In addition to the light-hearted preventative tactics, Pinnacol’s risk and HR teams developed and manage a policy for phishing test failures. The policy was shared with employees, and managers were asked to help enforce it with their direct reports.

Reeling in the results

Since the campaign, the quarterly mock phishing attack failure rate has consistently been less than 7.5 percent (and at best 6.5 percent), far exceeding the program’s goal of less than 15 percent employees failing to report mock attack emails.

Email open rates averaged 92.8 percent, and 92 percent of viewers watched the video in its entirety. The lobby event, during which employees could “phish” in a pool for prizes, was also well attended.

“We took the fun route with this campaign, and it worked,” said Barnes. “I am now hyper aware of suspicious-looking emails—and I don’t open anything I think could be a phishing scam. Our employees have worked to change their behavior. Ultimately, that’s what a good communications campaign should do.”



Home | Contact | Site Map