Fed Spending Bill Requires CISA to Evaluate and Report Back re Public-Private Cyber Insurance Working Group 

“Lawmakers also want CISA (Cybersecurity and Infrastructure Security Agency) to report back in 90 days about the feasibility of a public-private ‘cyber insurance and data analysis’ working group and establishing an accreditation program for third-party cybersecurity providers that work with federal agencies, critical infrastructure operators and state and local governments.”

Sorry, Your Hacked Software Is Not an Insured “Physical Loss:” Ohio Supreme Court 

Bits and bytes do not count… “Over the course of a three-year court battle, Owners (Insurance Company) asserted that (client) EMOI’s September 2019 ransomware attack lacked a physical dimension and accused the developer of attempting a runaround of its business property policy’s exclusion of ransomware costs. The justices agreed with the insurance company. ‘Software is … Read more

Cyber Attacks To Become “Uninsurable:” Zurich Insurance CEO

Forget natural disasters, says the CEO. Cyber is the biggest threat, and public-private systems will be needed (note recent US movement in that direction.) “’What will become uninsurable (versus climate change or pandemics) is going to be cyber,” (Mario) Greco said. ‘What if someone takes control of vital parts of our infrastructure, the consequences of … Read more

Mutual Insurer for Cyber Set to Launch Jan. 1st with Participants such as BASF & Solvay 

MIRIS, a “mutual insurer, a structure in which the company is owned by its customer members, is looking to meet increasing demand for cyber cover due to rising attacks…The new insurer is also talking to some 40 others about joining…” MIRIS is owned by its customer members (all European). MIRIS FAQs are here. Source: BASF, … Read more

Look Where 1/3 of the $4m+ Hacking Settlement by the Morley Companies Went 

Morley Companies settled for $4.3 million in relation to its August 2021 hack. The company did not report the data theft to the public until early 2022, apparently running further afoul of California and HIPAA regulations. “The Michigan-based third-party vendor provides process outsourcing for a range of U.S. companies, including healthcare. A little more than … Read more

×