We utilize artificial intelligence for site translations, and while we strive for accuracy, they may not always be 100% precise. Your understanding is appreciated.
Home/
Blog
/
Hapool Insurance Achieves Almost 100% Reduction…
Healthcare | Customer Stories
Hapool Insurance Achieves Almost 100% Reduction in Email Threats with OPSWAT
OPSWAT’s MetaDefender Email Security provides seamless security across all communication channels while reducing workloads and ensuring compliance.
Share this Post
About Hapool Insurance: Hapool Insurance Corporation is a privately owned insurance entity, supported by all insurance companies within Israel’s market. The company was established to provide regulatory solutions for mandatory car insurance, particularly for motorcycle owners, high-risk drivers, or those who have been refused coverage by other insurance companies. With its complex IT infrastructure and a focus on innovation, the organization has transformed its cybersecurity posture over the last four years, led by Guy Elmalem, IT and Cyber Infrastructure Manager.
What's the story? Hapool Insurance faced increasing cybersecurity challenges as its outdated Content Disarm and Reconstruction (CDR) technology was not able to defend advanced threats like phishing, malware, and encrypted files. To solve these challenges, Hapool Insurance needed to enhance threat detection, streamline operations, and reduce IT bottlenecks. After rigorous evaluation of several CDR solutions, they chose OPSWAT’s MetaDefender Email Security with Deep CDR as it was the most effective at neutralizing file-based threats in email attachments. The solution empowers users to manage encrypted files independently, reduce IT workload, and bring threat incidents to near zero, ensuring stronger protection and regulatory compliance for future risks.
In recent years, Banking, Financial Services and Insurance (BFSI) companies worldwide have increasingly become targets for cyberattacks, exposing critical vulnerabilities within the industry. Notable incidents such as the Anthem data breach demonstrated the devastating impact a large-scale cyberattack can have, with millions of sensitive records compromised and significant reputational damage to one of the largest insurers in the United States.
Similarly, Toyota Insurance Company suffered a major breach due to system misconfigurations, underscoring the importance of robust security protocols to protect customer data from both external attacks and internal vulnerabilities.
Another example is United of Omaha Life Insurance Company, which experienced a phishing attack that exposed the personal data of over 107,000 consumers. This incident highlighted the increasing sophistication of phishing schemes targeting insurance companies, exploiting email as a key attack vector to infiltrate secure networks and gain unauthorized access to sensitive information.
These breaches emphasize the urgent need for insurers to strengthen their defenses and implement advanced threat detection technologies to protect both customer and company data.
Hapool Insurance recognized the growing threat landscape and took proactive measures to overhaul its outdated cybersecurity infrastructure. With the rise in sophisticated phishing, ransomware, and data breach incidents within the industry, the company sought a comprehensive solution to protect its systems and streamline operations.
This led to the adoption of OPSWAT’s MetaDefender Email Security with Deep CDR technology, marking the beginning of a transformative journey toward improved cybersecurity and operational efficiency.
Outdated Security System Exposed Gaps in Threat Prevention and Operations
With the rising wave of successful breaches targeting insurance companies over the past year, Hapool Insurance determined that its existing cybersecurity solution was no longer sufficient to protect the organization from evolving email-related threats. The legacy system struggled with the growing volume of email-based threats, which remain the primary attack vector, accounting for 75% of all cybersecurity threats against critical organizations, according to Osterman Research (2024). Encrypted files posed a particular challenge as they required manual IT intervention to sanitize, creating bottlenecks and reducing operational efficiency.
The major challenges to email security we faced were twofold. First, the growing sophistication of cyber threats, especially phishing, malware, and targeted attacks, required a much more advanced level of protection than what our previous system could provide. Our old solution struggled with handling encrypted files, which slowed down processes and increased risk exposure.
Guy Elmalem
IT and Cyber Infrastructure Manager
Hapool Insurance was not alone in facing these challenges; the Osterman report highlights that up to 80% of organizations experienced at least one email-related security breach in the past 12 months, ranging from phishing attacks to ransomware infections. Guy Elmalem, IT and Cyber Infrastructure Manager at Hapool Insurance shared that when he joined the company, their previous CDR solution was outdated and could not keep up with the increasing sophistication of these threats.
This left the company exposed to growing risks, as email security breaches are a common occurrence among insurers and critical infrastructure organizations.
The system wasn’t user friendly, and IT was often called upon to manually intervene, especially when users needed to handle encrypted files or navigate the security processes. This was time consuming and diverted resources from other critical tasks.
Guy Elmalem
IT and Cyber Infrastructure Manager
Beyond security concerns, the need for IT involvement in routine operations added strain on internal resources. Productivity was impacted as employees were frequently delayed, waiting for files to be processed and sanitized. Elmalem recognized that maintaining this status quo was not sustainable, particularly with increasing regulatory pressure and the expectation that threats would continue to grow in both volume and complexity.
"We needed a solution that could seamlessly integrate with our existing email infrastructure, provide advanced threat detection, and allow end-users more autonomy without compromising security."– Guy Elmalem, IT and Cyber Infrastructure Manager.
Bottomline, Hapool Insurance needed a solution to reduce manual intervention, empower employees to handle encrypted files independently, and protect against zero-day threats.
This is where they turned to OPSWAT for a solution.
Evaluating the Alternatives: Why OPSWAT Stood Out
Hapool Insurance conducted extensive Proof of Concept (PoC) testing across multiple vendors to find the right CDR solution. During the evaluation, OPSWAT’s MetaDefender Email Security solution consistently outperformed other competitors.
"Given that our previous security posture wasn’t sufficient, we explored several alternatives. We evaluated different CDR and threat detection solutions available on the market, focusing on those that could provide a higher level of security, better integration with our existing systems, and ease of use for both IT and end-users."– Guy Elmalem, IT and Cyber Infrastructure Manager.
The PoC testing revealed that OPSWAT’s Deep CDR technology provided superior protection, handling sophisticated threats and encrypted files without manual intervention. Its integration capabilities and ease of deployment made it an ideal fit for Hapool Insurance’s needs.
During this evaluation process, OPSWAT’s MetaDefender Email Security stood out as the ideal solution due to its Multiscanning technology, seamless integration capabilities, and great user experience.
Guy Elmalem
IT and Cyber Infrastructure Manager
Integrating OPSWAT Across All Data Channels
OPSWAT’s MetaDefender Email Security was deployed across several critical channels in Hapool Insurance’s IT infrastructure to ensure comprehensive protection. The solution was established alongside existing systems to maintain continuity, with testing conducted throughout the rollout to validate performance.
We subjected OPSWAT to hundreds of penetration tests via the Business Automation System (BAS), and it proved resilient with just a few simple settings.
Guy Elmalem
IT and Cyber Infrastructure Manager
MetaDefender Email Security was integrated across four main data channels:
Email Channel
Integrated with Microsoft 365 cloud services to secure all email communications.
Websites and Portals
Connected via RestAPI to protect personal areas, supplier portals, and other platforms.
Secure Browser (RBI)
Allowed employees to download sanitized content through secure browsing environments.
Third-Party Supplier Connections
Ensured safe file exchange with lawyers, insurance agents, and investigators, with content sanitized upon receipt.
As part of the rollout, a pilot group of high-risk users was transitioned to receive scanned emails through OPSWAT’s system. The feedback was overwhelmingly positive.
"We transitioned a test group of ‘problematic’ users to receive emails scanned by OPSWAT. There was enthusiasm around their ability to independently release encrypted files by providing the file password in a web GUI without IT involvement." – Guy Elmalem, IT and Cyber Infrastructure Manager.
Operational Efficiency and Reduced IT Workload
The implementation of MetaDefender Email Security led to significant improvements in both security and operational efficiency. IT staff were relieved of routine sanitization tasks, which freed up time for strategic projects. Moreover, end-users enjoyed a more streamlined workflow, as they could now handle encrypted files independently. This reduced delays and increased overall productivity.
Challenges Hapool Insurance Experienced Before Implementing MetaDefender Email Security
Handling Encrypted Files Required IT Support: Employees relied on IT staff to manually sanitize encrypted files, creating delays and bottlenecks.
Insufficient Protection Against Advanced Threats: The outdated security system struggled with phishing, ransomware, and zero-day malware.
Operational Inefficiency Due to Manual Processes: Frequent IT intervention drained resources and slowed down productivity.
Lack of Autonomy for End-Users: Employees were unable to manage encrypted files independently, causing workflow disruptions.
Benefits Hapool Insurance Experienced After Implementing OPSWAT MetaDefender Email Security
Autonomous Encrypted File Management: Employees gained the ability to release encrypted files independently through a web-based GUI.
Improved Threat Detection and Security: OPSWAT’s Deep CDR technology protected against zero-day threats, ransomware, and phishing, reducing incidents to near zero.
Reduced IT Workload and Better Efficiency: Automated threat detection minimized manual intervention, allowing IT staff to focus on critical tasks.
Stronger Compliance and Future-Ready Defense: The solution ensured compliance with strict regulations and prepared the company for future cyber risks.
Security Impact: Threats Reduced to Near Zero
"After integrating OPSWAT, BAS system testing revealed that the number of potential threats making it through our email system dropped dramatically—close to zero."– Guy Elmalem, IT and Cyber Infrastructure Manager.
With every email and file passing through OPSWAT’s award-winning Deep CDR file sanitization technology, Hapool Insurance achieved a near %100 percent threat rate reduction through its email channel. This increased the company’s confidence in its ability to protect against both known, unknown and zero-day threats.
"With OPSWAT’s advanced protection in place, we’re no longer concerned about these vectors being a weak link, and we can confidently protect our organization from similar breaches."– Guy Elmalem, IT and Cyber Infrastructure Manager.
Regulatory Compliance: Ensuring Alignment with Stringent Standards
Hapool Insurance operates in a highly regulated environment, with oversight from the Israeli Capital Market Authority, the Ministry of Finance, and the Israeli Privacy Protection Authority. Compliance with these authorities requires robust cybersecurity and data protection protocols.
MetaDefender Email Security’s detailed logging and auditing capabilities provided the necessary transparency for audit readiness and compliance reporting.
"Working with MetaDefender Email Security helps us meet these compliance requirements by providing advanced threat prevention and data sanitization that ensures our network is secure."– Guy Elmalem, IT and Cyber Infrastructure Manager.
Looking Ahead: Preparing for Future Cybersecurity Challenges
Hapool Insurance remains committed to maintaining a proactive cybersecurity posture by expanding its use of OPSWAT’s solutions and adopting AI and automation technologies.
"Looking five years ahead, I see our cybersecurity protection evolving to be more proactive, automated, and integrated across all levels of the organization’s network. I see us moving towards systems that can predict and prevent attacks before they even happen by learning from patterns and adapting autonomously."– Guy Elmalem, IT and Cyber Infrastructure Manager.
With the ever-evolving threat landscape, Hapool Insurance’s partnership with OPSWAT ensures that it stays ahead of cyber risks while maintaining operational efficiency and compliance.
A Secure Future with OPSWAT
Hapool Insurance’s decision to deploy OPSWAT’s MetaDefender Email Security solution has transformed its cybersecurity posture. The company has achieved near-zero threat incidents, reduced IT workload, and enhanced productivity. The seamless integration of OPSWAT across all communication channels ensures that Hapool Insurance is well positioned to handle future threats.
Their proactive approach to cybersecurity, supported by OPSWAT’s Deep CDR and Multiscanning technologies, ensure that the company remains resilient in a dynamic and increasingly risky digital landscape.
With OPSWAT’s MetaDefender Email Security in place, every entry point is covered. Whether it’s email, web traffic, or file transfers, everything flows through OPSWAT where it is scanned and sanitized. Knowing that no malicious content can enter our network gives us peace of mind.
Guy Elmalem
IT and Cyber Infrastructure Manager
Discover how OPSWAT solutions can ensure your critical environment stays secure - talk to an expert today to get started.
