Ransomware Attack Demands Cause Cyber Insurance Claim Amounts to Skyrocket

Ransomware Attack Demands Cause Cyber Insurance ClaimThe perfect storm of large enterprises, cyber insurance policies, successful ransomware attacks, and ransom demands in the tens of millions now consistently result in seven-figure claim amounts.

Insurers of cyber policies are a great indicator around whether the security posture of most organizations is sound or not. And from the look of things, some of you could use some help. Tamara Ashjian, Director of Claims at Tokio Marine HCC – Cyber & Professional Lines Group recently spoke with Insurance Business about the current state of cyber insurance claims.

The trend seems simple enough; a few years ago, according to Ashjian, there were very few claims and most were in the $10,000 range. In 2019, claims climbed to just above the $500,000 range, and in 2020 claim payouts jumped significantly between $3 million and $5 million.

The expectation is that this amount will only go up, putting additional pressure on insurers to make sure their insureds have proper security in place.

According to Ashjian, “the number one way that hackers gain access to insureds’ systems is via employee error or negligence,” detailing that “threat actors typically gain access to a network through a phishing scheme, where the employee receives a spoof email or call and is tricked into providing their credentials.”

Employees and phishing don’t mix well, as phishing is the number one threat action used in data breaches and remains tied with remote desktop as the number one initial attack vector for ransomware attacks. Employees undergoing Security Awareness Training understand how to quickly identify phishing attacks and suspicious email content, reducing the risk of successful attack.

The less expensive course is to shore up your security, rather than try to get your cyber insurer to pay your claim. Your users need to be a part of that security model and Security Awareness Training is the answer.

Free Ransomware Simulator Tool

Bad guys are constantly coming out with new strains to evade detection. Is your network effective in blocking all of them when employees fall for social engineering attacks?

KnowBe4’s "RanSim" gives you a quick look at the effectiveness of your existing network protection. RanSim will simulate 20 ransomware infection scenarios and 1 cryptomining infection scenario and show you if a workstation is vulnerable.

RanSimScreen-1Here's how it works:

  • 100% harmless simulation of real ransomware and cryptomining infections
  • Does not use any of your own files
  • Tests 21 types of infection scenarios
  • Just download the install and run it 
  • Results in a few minutes!

Get RanSim!

PS: Don't like to click on redirected buttons? Cut & Paste this link in your browser:


Topics: Ransomware

Subscribe To Our Blog

Ransomware Hostage Rescue Manual

Get the latest about social engineering

Subscribe to CyberheistNews