Skip to content

Topic

Cyber Insurance

Underwriting of cyber risk, including insurers that combine coverage with vulnerability scanning and security services.

Current stories

investOne report1 publisher

Korean firms buy cyber insurance only up to the privacy law's minimum

Only 153 of the 2,486 new cyber policies Samsung, DB, Hyundai, KB and Meritz wrote in the first half, or 6.2%, covered breach response and recovery. More than nine in ten were the liability cover Korea's privacy law requires, so companies pay for breach investigation and data recovery themselves.

Publishers:en.sedaily.com

Reality

Evidence55
Adoption12
Hype gap+10
Incentives60
Confidence55
securityOne report1 publisher

Andover confirms its August attacker got inside town systems

Andover officials confirmed an attacker reached some town systems in the Aug. 13 cyberattack but still cannot say whether any data was taken. The town has set no date for finishing the review that decides who gets notified.

Reality

Evidence60
Adoption
Not scored
Hype gap+5
Incentives60
Confidence55
securityOne report1 publisher

Four-year payment-diversion campaign drained 35 million euros from 7% of French notary offices

French notaries lost the money to intruders who lived on their networks and edited payment details before the instructions went out, which is why bank-side verification kept waving the transfers through.

Reality

Evidence55
Adoption40
Hype gap+5
Incentives
Not scored
Confidence55
investOne report1 publisher

Insurers write AI-agent losses out of corporate policies while cutting cyber rates

Insurers won regulatory approval for more than 80% of their requests to exclude AI-related damages from corporate policies, according to a CSIS analysis. Companies deploying AI agents now hold losses their insurers have decided not to price.

Reality

Evidence40
Adoption40
Hype gap+20
Incentives
Not scored
Confidence35
investOne report1 publisher

Spain's first AI-agent breach notice rests on the reporting organisation's word

Spain's AEPD disclosed its first breach notice naming an AI agent as the reported attacker, based on an account the regulator has not verified. Read with cases in Australia and a coding-agent test, it puts the cost for insurers and security teams in the permissions each agent holds.

Publishers:fintech.global

Reality

Evidence35
Adoption
Not scored
Hype gap+20
Incentives60
Confidence40
scienceOne report1 publisher

FBI logged 22,000 AI-linked fraud complaints in its first year of counting them

The bureau's 2025 total of roughly $893 million comes only from victims who filed and from cases where investigators could identify the AI, and two of its subtotals overlap enough to exceed it. It is a floor.

Reality

Evidence55
Adoption58
Hype gap+15
Incentives60
Confidence45
securityOne report1 publisher

Arctic Wolf's incident response lead wants the ransom ceiling signed before the intrusion

Kerri Shafer-Page of Arctic Wolf sets out four ransomware decisions in a Help Net Security video, each needing a named owner and, in the case of the payment ceiling, a number approved in advance.

Reality

Evidence40
Adoption
Not scored
Hype gap+12
Incentives70
Confidence55
securityOne report1 publisher

Echo bought Minimus's enterprise customer contracts after the container vendor wound down

SecurityWeek logged 33 cybersecurity acquisitions in August 2026. Two of them took technology assets out of small vendors instead of buying the vendors, and only Kiteworks' move into Japan promised customers unchanged contracts and pricing.

Publishers:securityweek.com

Reality

Evidence56
Adoption31
Hype gap+12
Incentives54
Confidence51
buildOne report1 publisher

Attackers rewrote wire details inside 500 French notary offices for four years

France's ANSSI spent two years quietly evicting a crew that had been altering payment instructions inside notary networks. The procedural fix that landed takes bank details off email rather than checking whether they changed.

Publishers:news.risky.biz

Reality

Evidence45
Adoption58
Hype gap−20
Incentives42
Confidence50
productOne report1 publisher

Munich Re pays $575mn for At-Bay, and the "insurance plus security" premium vanishes

The cyber insurtech sold for about 43% of its 2021 valuation, roughly two times gross written premiums. SMB policyholders now wait until 2027 to land inside a reinsurer's specialty unit.

Publishers:thenextweb.com

Reality

Evidence58
Adoption66
Hype gap+12
Incentives74
Confidence55
buildOne report1 publisher

Munich Re's reported $575M for At-Bay reprices cyber underwriting, if the deal is real

Reuters puts the enterprise value about 57% below At-Bay's 2021 financing mark. Munich Re's own annual report still calls the relationship an investment.

Publishers:runtimewire.com

Reality

Evidence32
Adoption38
Hype gap+28
Incentives58
Confidence36