Another Large UK Company Caught with Inadequate Cyber Insurance? The Co-operative Group Appears Underinsured.

The Co-operative Group is a British operator of retail stores, funeral homes and other businesses. Like Marks and Spencer, another major UK retailer, the Co-op, which generates billion-of-dollars in yearly revenue, has been hit with a major cyber attack. But compared to Marks and Spencer, the Co-op appears to be grossly underinsured for cyber threats. … Read more

Jaguar’s New Tagline is “Copy Nothing,” but its Cyber Insurance Disaster Suggests “Penny Wise, Pound Foolish” Might be More Apt

Jaguar Land Rover, also known as JLR, was hit with a cyber attack last month that forced the company to shut down its tech systems and assembly lines, with billions-of-dollars of damages and lost sales potentially far exceeding JLR’s pre-tax profit last fiscal year. Sounds like time for the car maker’s cybersecurity insurance policy to … Read more

What a Difference a Day Makes: Berkley Sues as a Cyber Insurance Subrogee to Recover Claim Settlement

As the cyber insurance industry grows, there are more and more claims, leading to more and more settlements, leading to an increasing number of lawsuits by “subrogees.” These are insurance companies that use the process of “subrogation” to assume their insured’s legal rights to pursue recovery of money paid by the insurance company in a … Read more

What the Duck is Going on With Aflac’s Breach and Disclosures About it?

We’ve reported that insurance giant Aflac filed an SEC 8-K form in June to disclose that a hacker had used “social engineering” to gain “unauthorized access to its network.” Interestingly, at least for cyber insurance nerds such as us, Aflac did not file an “Item 1.05” 8-K for a “material” cyber event, but rather an … Read more

More Confusion on Cybersecurity 8-K Disclosures

We’ve long covered the SEC’s regulation requiring public companies to disclose serious cybersecurity incidents in an 8-K filing. See several updates and the text of the cyber disclosure regulation here. A common theme since the rules were released in 2023 has been confusion about when cybersecurity 8-Ks must be filed. The rules seem straightforward on … Read more

×