Forum Views ()
Forum Replies ()
Read more with google mobile :
Exclusive: Hacking blitz drives cyberinsurance demand
|
Edition:
U.S.
Article
Comments (0)
Follow Reuters
Facebook
Twitter
RSS
YouTube
Read
OPEC sees risk of price rise, shortage
12:08pm EDT
Google invests $280M in SolarCity solar roof fund
9:00am EDT
Analysis: Obama 2012 -- it's all about jobs
|
2:03pm EDT
Analysis: Experts say Casey Anthony defense faces uphill battle
10:49am EDT
Obama: If debt limit not raised, financial crisis possible
|
11:09am EDT
Discussed
127
Alabama governor signs nation’s toughest immigration law
111
Obama weighs new steps to boost jobs
80
U.S. debt default unimaginable, creditors say
Watched
Airbus' view of flying in the future
Mon, Jun 13 2011
Obama resigns from church
Mon, Jun 2 2008
Republican presidential hopefuls debate
4:37am EDT
Exclusive: Hacking blitz drives cyberinsurance demand
Tweet
Share this
Email
Print
Related News
World stocks rally on Chinese, U.S. data as euro rises
4:36pm EDT
Spain arrests Anonymous members over Sony attack
Fri, Jun 10 2011
Wall Street bounce fails to impress the skeptics
Thu, Jun 9 2011
Regulators pressure banks after Citi data breach
Thu, Jun 9 2011
Financial transparency skin-deep at medical journals
Wed, Jun 8 2011
Analysis & Opinion
How much for lifetime health insurance?
How to protect yourself from a data breach
Related Topics
Technology »
Media »
By Ben Berkowitz
NEW YORK |
Tue Jun 14, 2011 3:21pm EDT
NEW YORK (Reuters) - The recent string of sensational hacker attacks is driving companies to seek "cyberinsurance" worth hundreds of millions of dollars, even though many policies can still leave them exposed to claims.
Companies are having to enhance not just their information technology practices but also their human resources and employee training functions just to get adequate coverage against intrusion -- and in some cases, they are also accepting deductibles in the tens of millions of dollars.
Insurers and insurance brokers say demand is soaring, as companies try to protect themselves against civil suits and the potential for fines by governments and regulators, but also as they seek help paying for mundane costs like "sorry letters" to customers.
"When you have a catastrophic type of data breach then yes ... the phones ring off the hook," said Kevin Kalinich, co-national managing director of the professional risk group at insurance broker Aon Corp (AON.N).
In the past few weeks, the U.S. Senate, the International Monetary Fund, defense contractor Lockheed Martin Corp. (LMT.N), banking concern Citigroup Inc (C.N), technology giant Google (GOOG.O) and consumer electronics group Sony Corp (6758.T) are among those who have disclosed hacker attacks of various kinds.
In the days after Sony disclosed it had more than 100 million customer accounts compromised, the company said its insurance would help cover the costs of fixing its systems and providing identity theft services to account holders.
That helped drum up business for the still-growing segment of the industry, and the demand has only intensified since a more recent breach at Citigroup, which security experts said was the largest direct attack on a U.S. bank to date.
Some insurers say this is the moment the industry has been waiting for as the tide of bad news becomes so overwhelming that customers have no choice but to seek coverage. On Tuesday, Travelers (TRV.N) became the latest insurer to launch a package of policies covering various fraud and expense liabilities.
Aon's Kalinich said fewer than five percent of data breaches lead to costs of more than $20 million, and yet more and more companies are seeking to be insured for that and more to protect themselves against the shifting risk.
Large customers are going to extremes, taking out coverage for data breach liabilities of as much as $200 million, while also taking $25 million deductibles to keep their premiums down.
GOOD RISK
As with any kind of insurance, data breach policies carry all sorts of exclusions that put the onus on the company. Some, for example, exclude coverage for any incident that involves an unencrypted laptop. In other cases, insurers say, coverage can be voided if regular software updates are not downloaded or if employees do not change their passwords periodically.
"Insurers are all looking for good risks, whether it is a fire insurance company that wants a building that is sprinklered and doesn't have oily rags laying around - this is the equivalent in the IT area. They want good systems, they want good protection, they want good risk," said Don Glazier, a principal at Integro Insurance Brokers in Chicago.
Given that the average data breach cost $7.2 million last year, according to a March study from the Ponemon Institute, hundreds of millions of dollars of cover may seem extreme. But with the scale and scope of hacking attacks growing daily, some companies can not be cautious enough.
Of course, the risk they face is a moving target, both for them and for the insurance companies. After 10 years of writing policies, industry experts say a consensus is building on what "cyberinsurance" covers.
Generally, such policies now cover third-party liability, like suits filed by customers whose accounts have been hacked; direct costs like notification letters sent to affected customers; and, increasingly, fines and penalties associated with data breaches.
What is missing from the equation, however, is standards. Insurers can try to standardize the risk from hacking attacks, but cyberinsurance is still not auto insurance, where carriers can make their customers wear seat belts as a condition of a policy.
"One day the industry will actually be so robust that ... we'll have the leverage to actually create standards," said Tracey Vispoli, a senior vice president at insurer Chubb (CB.N). "We're not there yet but that to me is a win to the industry."
CONSUMER BURDEN
Consumers are increasingly finding themselves less protected and more liable as well. Courts are siding with vendors and not their customers in some cases when it comes to the misuse of data.
In late May, a U.S. magistrate judge in Maine recommended the district court throw out a lawsuit filed against a bank by one of its customers, a construction company.
The customer had suffered a series of unauthorized withdrawals from its account after some employees' computers were infected with a virus that captured their banking information. The company sued the bank on the grounds that the bank's systems should have caught the clearly unusual pattern.
Lawyers who litigate cyberrisk say in the current environment, many companies are only looking out for themselves, not for their customers or suppliers.
"Most companies are looking more for first party (coverage), they're worried more about their own systems," said Richard Bortnick, an attorney with Cozen O'Connor and the publisher of the digital law blog CyberInquirer.
"Not all companies deem it necessary to provide notification of a cyberbreach or incident for reasons of reputation and other marketing-related bases," he said.
(Reporting by Ben Berkowitz, Editing by Martin Howell)
Technology
Media
Related Quotes and News
Company
Price
Related News
Tweet this
Link this
Share this
Digg this
Email
Reprints
We welcome comments that advance the story directly or with relevant tangential information. We try to block comments that use offensive language, all capital letters or appear to be spam, and we review comments frequently to ensure they meet our standards. If you see a comment that you believe is irrelevant or inappropriate, you can flag it to our editors by using the report abuse links. Views expressed in the comments do not represent those of Reuters.
Comments (0)
Be the first to comment on reuters.com.
Add yours using the box above.
Social Stream (What's this?)
© Copyright 2011 Thomson Reuters
Editorial Editions:
Africa
Arabic
Argentina
Brazil
Canada
China
France
Germany
India
Italy
Japan
Latin America
Mexico
Russia
Spain
United Kingdom
United States
Reuters
Contact Us
Advertise With Us
Help
Journalism Handbook
Archive
Site Index
Video Index
Reader Feedback
Mobile
Newsletters
RSS
Podcasts
Widgets
Your View
Analyst Research
Thomson Reuters
Copyright
Disclaimer
Privacy
Professional Products
Professional Products Support
Financial Products
About Thomson Reuters
Careers
Online Products
Acquisitions Monthly
Buyouts
Venture Capital Journal
International Financing Review
Project Finance International
PEhub.com
PE Week
FindLaw
Super Lawyers Attorney Rating Service
Reuters on Facebook
Thomson Reuters is the world's largest international multimedia news agency, providing investing news, world news, business news, technology news, headline news, small business news, news alerts, personal finance, stock market, and mutual funds information available on Reuters.com, video, mobile, and interactive television platforms. Thomson Reuters journalists are subject to an Editorial Handbook which requires fair presentation and disclosure of relevant interests.
NYSE and AMEX quotes delayed by at least 20 minutes. Nasdaq delayed by at least 15 minutes. For a complete list of exchanges and delays, please click here.
Other News on Wednesday, 15 June 2011 China floods, landslides force 55,000 to flee: report
|
German E.coli outbreak claims first child victim
|
Fatah, Hamas see new Palestinian government next week
|
Lawmaker wants accused Iraqis sent to Guantanamo
|
Kurds raise profile, gain seats in Turkish assembly
|
Opponents of Greek austerity plan set strike
|
Kevin Croucher leads after first round in PBA Senior U.S. Open
Democrats Revive Medicare As Political Weapon
Traveling abroad: State department has help on hand
Lady Gaga tops Forbes Best Paid Celebrities Under 30 list
U.S. backs Philippines in row with China over disputed islands
Hugh Hefner, Crystal Harris call off wedding
Serena battles to three-set win over Vera Pironkova at Eastbourne
Winklevoss vs Facebook court clash lives on
|
Texas sex offender dies while raping 77-year-old victim
Apple's head of retail to become Penney CEO
|
Republican presidential candidates on health care: Transcript
AMD launches new chips, challenges Intel
|
Google shows features to speed up Web searches
|
After RIM warning, all eyes on new product outlook
|
California judge sides with Rambus on shredding
|
Health on the Hill: GOP presidential candidates debate health law, Medicare: Transcript
Ericsson to buy Telcordia for $1.15 billion cash
|
Yemeni blogger seeks Swedish asylum after threats
|
Exclusive: Hacking blitz drives cyberinsurance demand
|
Playboy founder Hugh Hefner dumped at the altar
|
NATO strikes Tripoli, Libyan rebels make gains
|
Verlander dominates Indians, Tigers take over first in AL Central
Phillies frying Fish; lead Marlins 9-1 in seventh
Nine N.Koreans drift to the South in boat: government source
|
Pryor apologizes to Tressel, Ohio State in press conference held by agent
President busy, no time for Republican debate says Carney
Yanks' Derek Jeter within six hits of 3.000 mark, but goes on DL with calf strain
Greek workers strike, protesters mass at parliament
|
Faith leaders voice opposition to Congress bill for E-verify
Gulf states vow to seek end to Yemeni crisis
|
800 year old relic stolen from LA church
Tanks deploy in east, Syrians flee assault on north
|
Senate Tries to Improve Railroad Security Without Breaking the Budget
Tokyo launches large-scale radiation monitoring after Fukushima
|
South Asia's growing modernity masks women's plight
|
Chile volcano ash may disrupt air travel for months
|
Mexican ex-mayor arrested over arsenal walks free
|
Cursed number 39 haunts Afghan car owners
|
Pandora prices at $16 per share, above range
|
Acer cuts 2011 tablet shipment target by nearly 60 percent
|
Kissinger, Huntsman: U.S., China need cyber detente
|
Exclusive: Terrestar nears bid pact: sources
|
Playboy founder Hugh Hefner dumped at the altar
|
Spelling mansion sold to Formula One heiress: report
|
Springsteen says Clemons' health signs are encouraging
|
Natalie Portman gives birth to baby boy: report
|
China downplays risk to children from lead poisoning: report
|
In search of fuel in oil-rich UAE
|
UK unemployment falls, but involuntary part-time workers increase
Afghanistan is most dangerous country for women
|
Khodorkovsky says investors fear Russian corruption
|
15 killed in central Somalia battle
China and allies back Russia against U.S. missile shield
|
ABC gets big ratings boost from NBA Finals
Prince William, Kate release California itinerary
JT: Working with ex Diaz 'sounds complicated to everybody else'
Analysis: Berlusconi's 17 years of dominance draw to a close
|
Five killed in Colombian gold mine collapse
NFL owners, players appear to be making progress in most recent talks
LeBron backtracks on comments made after Game 6 loss to Mavs
Familiar ring: Mavericks want fingers adorned, reject Cubans idea to celebrate championship
U.S. Open 2011 Preview: Phil Mickelson turns 41, he's excited and upbeat
UK police detain two near home of singer Joss Stone
|
British actress Elizabeth Hurley divorces
|
Songwriter Carole King signs book deal
|
Greece at new risk of being pushed off euro
Bodies of missing Tenn. mom, Jo Ann Bain, and daughter found
Female Breasts Are Bigger Than Ever
AMD Trinity Accelerated Processing Units Now in Volume Production
The Avengers (2012 film), made the second biggest opening- and single-day gross of all-time
AMD to Start Production of piledriver
Ivy Bridge Quad-Core, Four-Thread Desktop CPUs
Islamists Protest Lady Gaga's Concert in Indonesia
Japan Successfully Broadcasts an 8K Signal Over the Air
ECB boosts loans to 1 trillion Euro to stop credit crunch
Egypt : Mohammed Morsi won with 52 percent
What do you call 100,000 Frenchmen with their hands up
AMD Launches AMD Embedded R-Series APU Platform
Fed Should not Ignore Emerging Market Crisis
Fed casts shadow over India, emerging markets
Why are Chinese tourists so rude? A few insights