Company Learns the Hard Way that Cyber Insurers May Not Count Social Engineering Attacks As “Computer Fraud” 

“When SJ filed its claim with Travelers, the court noted, it did so only under the social engineering fraud agreement. After realizing the policy limit on computer fraud was 10 times higher, ‘SJ Computers then made a series of arguments – ranging from creative to desperate – to try to persuade Travelers that its loss … Read more

Hacker Group Cites Target’s Cyber Insurance Limits in Ransom Demand 

“The Hive group claims to have breached the system and then obtained details of its cyber insurance policy to use in negotiations. ‘We are very well informed and precise in our operations, so we know that Wootton have cyber insurance that reaches £500k,’ the group wrote in the message to students and parents.” Source: Ransomware … Read more

Rhu-row — Cyber Insurance May Not Cover “Phishing” Fund Diversion Scams 

Note the language in the policy that appears to exclude losses from similar scams. It’s in the courts now. “Star Title’s employees purportedly failed to authenticate the perpetrator’s wire instructions. Upon learning that the fraudster had diverted the funds, Star Title tendered a wire fraud claim to its cyber insurance carrier, which denied coverage.” Source: … Read more

Useful Survey on Global Cyber Risk and Insurance from Munich Re

“Munich Re has been involved in managing cyber risk from the first moment it became a consideration. The results of our Global Cyber Risk and Insurance Survey 2022 underline that there is clearly more action required – for policyholders and the insurance industry.” One interesting tidbit is increasing use of personal cyber insurance by senior … Read more

How’s The Fortune 1000 Doing With Cyber Security? Check Out Data “Recaptured” From Cyber Crooks. 

“Drawing on SpyCloud’s database of over 200 billion recaptured assets, researchers identified over 687 million exposed credentials and PII tied to Fortune 1000 employees, a 26% increase from last year’s analysis. Analysis of this data showed a 64% password reuse rate, widespread use of easy-to-guess passwords, and a spike in malware-infected devices…”   Source: SpyCloud … Read more