Cyber insurance carriers are adopting a more cautious approach to underwriting and claims management as declining premium rates, rising ransomware losses, and concerns about systemic cyber events pressure profitability. Industry experts say insurers are placing greater emphasis on policyholders’ cybersecurity controls, technology dependencies, and exposure to large-scale incidents that could affect multiple insureds simultaneously.
For claims professionals, the shift is translating into closer examinations of whether insured organizations maintained required security measures, particularly multifactor authentication and other baseline controls. Coverage disputes increasingly focus on policy compliance at the time of loss, and policyholders may recover a smaller percentage of total breach-related costs than in prior years.
Cyber incidents continue to generate significant financial losses through business interruption, ransomware payments, forensic investigations, breach notification expenses, legal costs, and class-action litigation. Recent cyber events involving major organizations such as Hasbro are expected to serve as important tests of how insurers handle large-scale remediation and revenue-loss claims in the current market environment.
Another issue receiving increased attention is the treatment of nation-state cyberattacks. Court decisions involving the NotPetya attack and subsequent market guidance from Lloyd’s have intensified debate over war exclusions and the extent to which state-sponsored cyber events remain covered. Claims professionals should expect continued litigation and policy interpretation disputes surrounding these provisions.
Artificial intelligence is emerging as another area of concern. Insurers and cyber risk modelers warn that AI may accelerate attack capabilities, increase loss severity, and create new coverage uncertainties. As organizations rapidly deploy AI tools, carriers are expected to examine governance frameworks and security controls more closely during underwriting and claims reviews.
A broader industry trend is emerging in which cyber insurers are positioning themselves as active participants in loss prevention and incident response rather than simply reimbursement providers. Claims adjusters should anticipate greater collaboration with breach coaches, forensic firms, legal counsel, and approved vendor networks as cyber claims become more complex and more heavily scrutinized.
