Estimated reading time: 8 minutes
International General Insurance has taken a 60% stake in Cipher Underwriting Ltd, a Bermuda-based cyber treaty reinsurance managing general agent.
Cipher will be led by Ari Chatterjee, who built Hannover Re’s cyber unit in Bermuda and was later chief underwriting officer at Envelop Risk.
Of the news, Chatterjee said, “We are privileged to partner with IGI in launching Cipher. IGI brings institutional credibility, excellent financial security, strong governance, and an experienced, stable leadership team that will help us capitalize on attractive opportunities and deliver sustainable, risk-adjusted profitability.”
The announcement landed on 1 September. Cipher is not yet operating, with commencement subject to registration and licensing by the Bermuda Monetary Authority.
One phrase in the release does more work than the rest of it. Cipher will target cyber treaty business “with lead capabilities.”
Why Lead Capability Matters For A Cyber Reinsurance MGA
Following is the common position. A follower takes a share of a treaty someone else has priced and structured.
Leading is different. The lead reinsurer sets the terms, builds the pricing, and carries the technical argument that the rest of the market either accepts or walks away from. On a cyber treaty, that means holding a defensible view on aggregation, wordings, and systemic exposure, then persuading followers to trust it.
IGI put the phrase in its announcement rather than leaving it implied. That suggests the platform was built around a specific underwriter rather than a distribution opportunity.
The Underwriter Cipher Was Built Around
IGI credits Chatterjee with more than 20 years in the industry, over a decade of it in cyber reinsurance, and with setting market standards on data and policy wordings. He spent eight years at Hannover Re in Bermuda from 2010, where he built the reinsurer’s cyber underwriting unit on the island and served as its cyber product lead.
From 2018 until last year, he was chief underwriting officer at Envelop Risk, opening the cyber reinsurance specialist’s Bermuda office. Cipher will compete for the same treaty business.
IGI describes him as having set market standards on data and policy wordings across more than a decade in cyber reinsurance. The concrete version is that he has built a cyber book from nothing once already.
TAKE THE CYBER INSURANCE NEWS SURVEY
A Soft Market To Launch Into
Cipher arrives in a market with far more capacity than it needs.
The trend was visible early. Lockton Re reported cyber reinsurance capacity rising by $250m in the first half of 2025 while rates fell and reinsurer margins tightened. It has accelerated sharply since.
Gallagher Re’s cyber rate index recorded a 32% risk-adjusted rate reduction on cyber aggregate excess of loss contracts at the January 2026 renewals. The broker attributed the fall to excess capacity in the market. Cedants won structural concessions too, with many securing reductions in attachment points, the loss thresholds at which reinsurance begins to pay.
April brought no relief. US cyber reinsurance rates fell around 32% at the April renewals, with the sharpest movement in catastrophe loss-free pricing and non-proportional placements. Pro rata commissions edged up 1%. Average market cessions held near steady at 39% through the first quarter, down from 40% in 2025.
Not everything points one way. Gallagher Re reported North American carriers and reinsurers watching the US and Iran conflict closely, alongside the Stryker wiperware incident, for what both might mean for war exclusions and nation-state wordings.
Entering that market is a bet on differentiation rather than scarcity. The reason it might work sits in how the market is restructuring.
The Shift That Favors A Lead Underwriter
Cyber reinsurance is moving away from quota share and toward excess of loss.
Gallagher Re projects total excess of loss limit demand nearly doubling to $9bn a year by 2030, driven by that structural shift and by a 70% rise in retained probable maximum losses. Guy Carpenter observed new structures appearing in January, including risk excess of loss, retrocession arrangements and combined property and cyber treaties. Cedants have grown reluctant to cede profitable business proportionally, so they are buying protection against events instead.
That change matters for Cipher specifically. Quota share is a capacity business. Excess of loss is an underwriting business, priced on a view of severity and aggregation rather than a share of someone else’s book. Leading excess of loss placements demands exactly the technical argument a long-serving cyber underwriter is equipped to make.
There is a timing question worth watching, though it sits on the primary side rather than the reinsurance side. James Dominguez, Gallagher Re’s senior vice president for cyber reinsurance in North America, noted in April that lead insurers in the large corporate and SME segments were beginning to mark a shift, with rates expected to stabilize and potentially rise in late 2026. That is the direct market, not the treaty market. The two do not stay decoupled indefinitely.
Cipher cannot write anything until the Bermuda Monetary Authority licenses it. Realistically, that puts its first meaningful renewal at 1 January 2027.
The Diversification Claim
IGI president and chief executive Waleed Jabsheh framed the deal as achieving “immediate product and geographic diversification into non-correlated classes of business.”
At the group level, that holds. IGI writes energy, property, aviation, construction, ports and terminals, marine, contingency, political violence, financial institutions, casualty, professional indemnity and directors and officers business. A ransomware event has no relationship to a hurricane or a hull loss. Adding cyber genuinely spreads the group’s exposure.
Within cyber, the picture inverts. Cyber is the most internally correlated class in the market, which is the entire aggregation problem. CyberCube warned this week that concentration across compute infrastructure, cloud platforms and foundation model providers turns shared dependencies into shared exposure across insureds. Parametrix put the CrowdStrike outage at $5.4bn for US Fortune 500 companies alone.
So Cipher diversifies IGI’s group portfolio while concentrating a systemic exposure inside a single platform. Both things are true. Cedants weighing whether to support a new lead will be interested in how Cipher intends to manage the second one.
The Unexplained Phrase
The release describes an “AI-integrated MGA platform” without saying what that means, or which entity it means.
The phrase sits inside the sentence about ownership. IGI holds its 60% through IGI Managing Agencies Holdings, which the release says provides the AI-integrated platform with the ability to deploy capital into a diversified worldwide portfolio of specialty reinsurance business. The following sentence states that Cipher’s initial focus is cyber treaty business. Those are set against each other, and the release separately calls IGI Managing Agencies a dedicated platform for strategic partnerships.
Read that way, the AI descriptor attaches to the holding vehicle rather than to Cipher’s underwriting, which leaves a gap. Nowhere does the release say what technology Cipher will actually underwrite on.
The question matters because of where Chatterjee comes from. Envelop Risk built its proposition on artificial intelligence and advanced analytics applied to cyber underwriting, drawing on attack surface scans, dark web data and attacker behavior trends alongside insurance market data. He spent seven years there as chief underwriting officer. For a lead underwriter in a class where the technical argument determines who follows, what sits behind that argument is worth knowing.
What Comes Next
Cipher is the first venture under IGI Managing Agencies Holdings, formed to house strategic partnerships, new product lines and incubated teams within an MGA structure. IGI says the platform can serve future growth and diversification.
The Insurer reported in March that Chatterjee’s planned venture could later broaden into several major lines in India. IGI already operates from GIFT City, India’s international financial services center. Read together, the release’s line about future opportunities looks less like boilerplate.
For now, the business is one class, one jurisdiction and one underwriter, pending a license. IGI has almost 25 years of specialty underwriting behind it and an A rating from AM Best. Chatterjee has built a cyber reinsurance book before. Whether lead capability is enough to earn a following in a market awash with capacity is the question the next renewal season answers.
FAQ – Cyber Reinsurance MGA
What is Cipher Underwriting?
A Bermuda-based specialty treaty reinsurance managing general agent focused on cyber, launched by International General Insurance. IGI holds 60 percent through IGI Managing Agencies Holdings. Operations remain subject to registration and licensing by the Bermuda Monetary Authority.
Who leads Cipher?
Ari Chatterjee, credited by IGI with more than 20 years in the industry and over a decade in cyber reinsurance. He built Hannover Re’s cyber underwriting unit in Bermuda and was chief underwriting officer at Envelop Risk from 2018 until last year.
What does lead capability mean in cyber treaty reinsurance?
The lead reinsurer sets terms and pricing for a treaty placement, with followers taking shares on those terms. Leading requires a defensible technical view on aggregation, wordings and systemic exposure, which is why lead capability is worth announcing.
Is the cyber reinsurance market growing?
Demand is growing while pricing falls. Gallagher Re projects excess of loss limit demand nearly doubling to 9 billion dollars a year by 2030. Meanwhile cyber aggregate excess of loss rates fell 32 percent on a risk-adjusted basis at the January 2026 renewals.
Does cyber diversify a specialty insurance portfolio?
Against unrelated classes, yes. Cyber losses do not correlate with hurricanes, marine casualties or aviation events. Within cyber itself, correlation is high, which is why aggregation and systemic exposure remain the central underwriting challenge for the class.
Related Cyber Insurance Posts
- CyberCube Built The AI Coverage Map
- Take the Cyber Insurance News Survey
- Bermuda’s Cyber Insurance Market Growth Amid Rising Cyber Risks – Report(Opens in a new browser tab)
- Coalition Launches Reinsurance Intermediary to Expand Cyber Reinsurance Offerings(Opens in a new browser tab)
- Re/insurance Outlook Europe 2024(Opens in a new browser tab)