Look Where 1/3 of the $4m+ Hacking Settlement by the Morley Companies Went 

Morley Companies settled for $4.3 million in relation to its August 2021 hack. The company did not report the data theft to the public until early 2022, apparently running further afoul of California and HIPAA regulations. “The Michigan-based third-party vendor provides process outsourcing for a range of U.S. companies, including healthcare. A little more than … Read more

APCIA to Feds: Not So Fast with a “Cyber TRIP” 

American Property Casualty Insurance Association’s response to the federal government’s request for comment on cyber insurance issues: “We believe it is premature to explore the details of a federal insurance response without conducting a thorough study of the threshold questions raised above to determine where, if at all, such a response is needed. Nevertheless, experience … Read more

Zurich’s Defeat in Court is Win for Companies Seeking to Cover Cyber Insurance Deductibles with 3rd Party Payments 

An appeals court found T-Mobile can cover its Zurich deductible with funds it recovered from a vendor involved in the breach.  “The court rejected Zurich’s argument that a policyholder can’t use a third-party payment as a deductible and found that the insurer must cover T-Mobile’s losses stemming from the breach. The decision will add firepower … Read more

TSA Asks: How Could Cyber Insurance Fit into Regs for Rails and Pipelines? 

You’ve got until Jan. 17th to weigh in. See instructions in the embedded document at the link below. Requested feedback includes: “Address incentivizing cybersecurity adoption and compliance. TSA wrote that it ‘is particularly interested in comments on types of incentives, such as liability protection, insurance, commercial contracts, or other private- or public-sector options, that would … Read more

Got an Opinion on Government Financial Backing for the Cyber Insurance Industry? You’ve Still Got Time to Weigh In

The new deadline to comment on the issue is December 14th. “Pursuant to a recommendation from the Government Accountability Office, under direction from Congress to investigate the question, the agencies are seeking answers on ‘the extent to which risks to critical infrastructure from catastrophic cyber incidents and potential financial exposures warrant a federal insurance response,’ … Read more

×