Cyber Liability Challenges INSURANCE INSIGHTS SHAWN PRESNELL MANAGING DIRECTOR OF INSURANCE SERVICES The challenges with cyber liability today are greater than ever. The most recent cyberattack at CDK Global was eye-opening, to say the least. It proves that any company can be vulnerable to a cyberattack. Whether it’s financial applications, email communications, sales order processing or customer relationship management systems. Data is the backbone of business. The more reliant a company is on digital data, the lower its tolerance is for any interruption or corruption of data caused by cyber threats. The recent rise in high-profile cyber incidents such as computer viruses, data theft, identity theft and other cybercrimes makes it critically important to keep data secure. DATA BREACH What happens when a data breach occurs and what are the implications from an insurance standpoint? Consider these scenarios: • Scenario 1: One of your employees opens an email that has a computer virus attached to it. The virus crashes the dealership’s computer network but not before spreading itself to everyone in its contact list, including all customers. As a result, one of your customers gets the same virus and wipes out his whole network, and now the customer is suing your dealership for damages. • Scenario 2: A disgruntled former employee logs into your network and blocks access to the company website so you cannot access your accounts or do business. After two weeks of this, everyone is upset because they cannot operate normally, and you are losing customers by the hour. Not only have you lost customers, but you may not be able to get them back. COVERAGE LACKING What do these scenarios have in common? None of these losses would be covered under a typical business insurance policy. Commercial general liability policies cover claims for damage to others property, but damage to data is typically excluded. Not only is the damage to data excluded, but damage (including bodily injury) caused by a loss of data is often excluded as well. This means the full financial impact of these scenarios would fall directly on your business. The policies that add some cyber coverage by endorsement are usually very limited in coverage too. Times have changed, and most businesses aren’t prepared for these scenarios. Yet they are happening every day at an alarming rate with more privacy and security breach headlines in the news, and only a small portion of what is happening is reported. MAJOR CYBER ATTACKS IN 2024 • February 2024: UnitedHealth RX processor Change Healthcare — Ransomware attack causing massive disruption for four weeks! They had to pay a $22 million ransom to a foreign cybercrime group. • April 2024: Discord IT Social Media — 4 billion+ chats were harvested! • May 2024: Ascension Health Systems — Ransomware attack that forced it to divert emergency care from some of its hospitals. • June 2024: Rite Ad had 2.2M people that were affected by a data breach due to a ransomware attack. • June 2024: CDK Global — Two cyber-attacks within 48 hours caused CDK to shut its systems down. This impacted more than 15,000 auto dealerships. Many dealerships had difficulty doing “business as usual” with their DMS completely shut down. Many dealerships had to revert to manual analog operations which impacted their ability to do business. Some dealers suffered a loss in revenue during this two-week outage. To get systems back online, CDK may have paid a significant ransom. THE GENERATOR 24
RkJQdWJsaXNoZXIy MTg3NDExNQ==