We were excited to welcome Anne Kirby, Founder & Owner of The Candy Factory, and Chris Ballentine, Community Relations Manager for Southern Market Lancaster, Certified AI Enthusiast & Communications Strategist, who generously shared their time and talents to explore how small businesses can use AI in meaningful, practical ways.
Their presentation focused on real-world applications that business owners can begin implementing immediately—no technical background required.
Google Business Profile Optimization
AI can be a powerful partner in managing your Google Business Profile. From mining customer reviews to identifying trends, patterns, and key language, AI helps uncover what your customers are really saying. It can also generate thoughtful review response templates, assist with posting updates, and analyze insights. The key takeaway: the more context and detail you provide in your prompts, the more accurate and useful the results.
Refining Website Messaging
AI can help sharpen your digital presence by strengthening homepage messaging, generating FAQs based on real customer questions, and identifying priority updates using page traffic data.
Final Takeaways
The session closed with a grounded and thoughtful perspective: start small, use AI responsibly, and avoid creating low-value “AI slop.” Most importantly, AI is a tool—not a replacement for human connection, creativity, or collaboration.
The attack on H&H Group was not random. They were targeted because their data held a monetary value. Over time, a combination of cost concerns, convenience, and “we’ve always done it this way” thinking led to gaps in security. An intruder quietly gained access to their system and remained undetected, collecting information. That data was then packaged and sold on the dark web, where the Medusa ransomware group purchased it and launched a coordinated attack at 6:00 a.m.
The initial response made a critical difference. An employee flagged the issue immediately, IT instructed them to disconnect from the internet, and those quick actions helped limit the damage. Just as important: do not attempt to fix the issue internally. The next call should be to your insurance provider, who can deploy a digital forensics team to investigate how the breach occurred and contain the threat.
During a ransomware attack, files often remain visible but are inaccessible. In this case, H&H Group was able to recover because their data had been securely backed up offsite, beyond the attackers’ reach. Restoration took several days and required around-the-clock effort.
The human impact was intense. Attackers contacted employees repeatedly—up to three times a day—using intimidation tactics to pressure the company into paying.
The breach ultimately occurred through the very security device designed to prevent it—underscoring the need for constant vigilance and layered protection.
• Back up critical data offsite and ensure it is not accessible from your primary network
• Act immediately: disconnect systems and contact your insurance provider
• Do not rely solely on internal IT to resolve an active attack
• Use secure password management tools like BitWarden
• Regularly review and update security practices—complacency is a real risk
• A sobering reminder: ransomware isn’t a distant threat—it’s a business risk that demands preparation, awareness, and decisive action.
• Gladfelter Insurance Group
• AmTrust Cyber Insurance
• GDC IT Solutions