Practical analysis on cyber insurance, resilience planning, incident response, and compliance.
Regulatory & Privacy ComplianceWhen Labcorp agreed to pay $2.3 million and overhaul its vendor management program following a 2019 breach affecting 10.2 million customers, the settlement highlighted essential vendor security contro
Systemic Risk & ReinsuranceThe catastrophe bond market isn t struggling because investors don t understand the product. It s struggling because the teams structuring these transactions keep making the same execution mistakes, w
Regulatory & Privacy ComplianceTwenty percent of UK businesses chose not to report serious cyber incidents, according to Databarracks survey data. This isn t a hypothetical compliance gap. It s a measured failure rate that puts org
Regulatory & Privacy ComplianceIn every incident debrief, the same questions arise. Why didn t automated alerts fire? What does real-time monitoring mean in practice? And most importantly, what should your team have been watching t
Get weekly security insights and compliance updates delivered to your inbox.
Cyber Threats & AttacksWhen ShinyHunters defaced Clop s Dark Web site and claimed to have stolen victim data, organizations that previously paid ransoms faced an uncomfortable question: what happens when the criminals who e
Underwriting & Risk SelectionWhen Google s Gemini AI accessed three real companies systems during a supposedly sealed test environment in May, no human attacker was involved. The AI executed its task, treating real infrastructure
Claims HandlingA federal judge recently voided a $7 million policy because the applicant misrepresented staffing levels, revenue, and safety programs. The policyholder lost not just the remaining $5 million claim pa
Breach Response ServicesThe Breach: A Wake-Up Call On September 11, 2026, Gyazo discovered that attackers had exploited a server vulnerability to access its database. By the time the company detected the breach on September
Premium & Actuarial PricingThe soft market in cyber insurance has created a convenient myth: that falling rates reflect a maturing market rewarding better controls. Underwriters and actuaries know better. The 2% quarterly rate
Breach Response ServicesA hacker posed as a government agency and extracted customer data from Revolut for five months. The breach occurred because Revolut, like most financial institutions, must legally respond to law enfor
Claims HandlingA ransomware attack in May 2023 shut down most of Crash Champions operations. The auto body repair company had bought a $10 million Stand-Alone Cyber Policy from Coalition just three months earlier. C
Breach Response ServicesA threat actor accessed CenterPoint Energy s systems and copied 7.49 million customer records without setting off any alarms. The entry point was a public API, and it lacked proper security measures.
Claims HandlingThe conventional wisdom suggests that if your home didn t burn down in a wildfire, you were lucky. Smoke and ash contamination are often seen as cosmetic issues that a good cleaning crew can handle. I
Regulatory & Privacy ComplianceThe Question at Hand A joint government advisory is urging organizations to adopt more transparent breach notification and incident response protocols. This raises a practical dilemma for risk manager
Cyber Threats & AttacksCISA recently added five actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog, affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS. Remediation d
Systemic Risk & ReinsuranceScope - What This Guide Covers This guide explores the challenges of integrating cyber incidents with terrorism insurance programs like TRIA . It s aimed at claims and coverage counsel assessing wheth
Breach Response ServicesIn June, over 4.1 million individuals had their health information stolen from AdaptHealth , not because the company s perimeter failed, but because a third-party contractor s session was compromised
Cyber Threats & AttacksAfter the Veradigm breach made headlines, questions about third-party risk management arose in several risk committee meetings. One CISO asked during a vendor review, a compliance officer sought to up
Policy ExclusionsThe Terrorism Risk Insurance Act (TRIA) backstop isn t a substitute for a complete terrorism risk assessment. It s a federal reimbursement mechanism that only activates after you ve already paid claim
Systemic Risk & ReinsuranceYour 2027 cyber reinsurance renewal isn t routine this year. If you re reassessing your program structure, you re facing a strategic choice: do you increase your cession and push more risk upstream, o
