STREAMING NOW: Watch Now

Hacks can cost businesses millions. Insurers may refuse to pay up

Cyberattacks are a nightmare for chief executives. To make matters worse, their insurers may refuse to pay u...

Posted: Jan 11, 2019 7:37 PM
Updated: Jan 11, 2019 7:37 PM

Cyberattacks are a nightmare for chief executives. To make matters worse, their insurers may refuse to pay up for damage the hackers do to their business.

A dispute between food and beverage giant Mondelez and Zurich Insurance (ZURVY) shows just how much is at stake. Mondelez has filed a lawsuit in Illinois that accuses the insurance company of refusing to cover losses it suffered as a result of the NotPetya cyberattack.

Digital security

Technology

Crime, law enforcement and corrections

Criminal offenses

Digital crime

Business and industry sectors

Business, economy and trade

Cyber attacks

Insurance

Unrest, conflicts and war

Continents and regions

Europe

Switzerland

Western Europe

Zurich

Cyberterrorism

International relations and national security

National security

Terrorism

Terrorism and counter-terrorism

Digital privacy

Companies

Mondelez International

Law and legal system

Lawsuits and claims

Trial and procedure

The attack swept across the world in June 2017, infecting networked computers at companies including advertising group WPP (WPPGF), drugmaker Merck (MKGAF) and global shipping company FedEx (FDX).

Mondelez (MDLZ) said in October 2018 that the attack cost it at least $114 million. But according to the lawsuit, Zurich Insurance has cited a "war exclusion" and refused to cover the losses.

The 'war exclusion'

The United States and the United Kingdom have blamed the NotPetya attack on Russia, suggesting that it was part of an effort to destabilize Ukraine.

In its lawsuit, Mondelez claims that Zurich Insurance subsequently refused to compensate it for losses suffered in the attack, citing a contract exemption for a "hostile or war like act" by any "government or sovereign power."

Zurich Insurance declined to comment on the dispute, saying it does not give details about individual policies. Mondelez also declined to comment.

The case could prove to be an important test for both companies and insurers, and help to establish when policyholders should be compensated for a cyberattack.

Rising threat

Executives in Europe, East Asia and North America say cyberattacks are the number one risk facing their companies, according to a survey published in November by the World Economic Forum.

Yet many companies do not have insurance that specifically covers cybercrimes, relying instead on general "all-risk" policies.

"Many of these all-risk policies may not even mention cyber, they were not designed to cover cyber," said Christine Marciano, CEO of insurance broker Cyber Data Risk Managers.

"They were written at a time when nobody could have predicted that these attacks would happen," she said.

Marciano said the insurance industry is closely watching legal actions such as the one filed by Mondelez to see whether more general policies should cover cyberattacks.

Contagious attacks

The nature of cyberattacks present real risks for insurers, as well as their clients.

Domenico del Re, an insurance expert and director at PwC, said insurers are most worried about systemic cyberattacks on the scale of NotPetya because they can simultaneously affect multiple clients across the world.

"This is what is different about cyber," he said. Other risks, like theft or kidnapping, are unlikely to affect multiple clients at the same time, he added.

The damage can also be extensive.

"There is a myriad of ways in which a cyberattack can cause financial loss — actual physical loss to the IT equipment, claims from third parties whose data was lost, fines, fraudulent transactions," del Re said.

That means that an insurance company could be on the hook for physical and financial losses, as well as damage to users and clients caused by data theft.

Data issues have become even more pressing after the General Data Protection Regulation (GDPR) came into effect last year in Europe. The law can mean huge fines for companies.

This could happen to you

"Companies that used to have the mindset of 'this can't happen to me' .... are now starting to realize this is something they can't be without," said Marciano.

Limited data on the damage caused by major cyberattacks makes it difficult for insurance companies to model and price policies.

Mondelez said its $114 million in losses were caused by property damage and disruptions to its business. It said in October that NotPetya had destroyed 1,700 of its servers and 24,000 of its laptops.

Equifax (EFX), which was also hit by a huge hack in 2017, said its damages exceeded $350 million. Insurance has so far covered $95 million, it said in its most recent quarterly financial report.

Minnesota Coronavirus Cases

Data is updated nightly.

Cases: 609387

Reported Deaths: 7743
CountyCasesDeaths
Hennepin1262491796
Ramsey52997910
Dakota47216475
Anoka43200465
Washington27664296
Stearns22659227
St. Louis18245319
Scott17686139
Wright16518153
Olmsted13503103
Sherburne1212396
Carver1073749
Clay829692
Rice8249111
Blue Earth769944
Crow Wing687999
Kandiyohi669885
Chisago626954
Otter Tail590087
Benton585198
Goodhue485574
Douglas477781
Mower477533
Winona463552
Itasca462768
Isanti445566
McLeod434261
Morrison427762
Beltrami410163
Nobles409850
Steele400719
Polk390772
Becker389157
Lyon365054
Carlton356958
Freeborn350734
Pine337323
Nicollet334045
Mille Lacs314856
Brown308640
Le Sueur299527
Cass288133
Todd288133
Meeker265444
Waseca240723
Martin236933
Roseau212221
Wabasha20833
Hubbard197741
Dodge18943
Renville183146
Redwood178141
Houston175416
Cottonwood168124
Wadena165023
Fillmore158910
Faribault156920
Chippewa154038
Pennington153820
Kanabec147828
Sibley147310
Aitkin139237
Watonwan13619
Rock129019
Jackson123112
Pipestone117126
Yellow Medicine115320
Pope11396
Murray107310
Swift107318
Koochiching96819
Stevens92611
Clearwater89217
Marshall88817
Lake84320
Wilkin83813
Lac qui Parle76122
Big Stone6094
Grant5958
Lincoln5863
Mahnomen5669
Norman5509
Kittson49122
Unassigned48193
Red Lake4037
Traverse3815
Lake of the Woods3474
Cook1740

Iowa Coronavirus Cases

Data is updated nightly.

Cases: 374664

Reported Deaths: 6109
CountyCasesDeaths
Polk58891646
Linn21448342
Scott20426250
Black Hawk16680319
Woodbury15319230
Johnson1473686
Dubuque13595213
Dallas1144099
Pottawattamie11307177
Story1082848
Warren592092
Clinton564393
Cerro Gordo562297
Webster538996
Sioux519174
Muscatine4920106
Marshall491479
Des Moines478275
Jasper452073
Wapello4366123
Buena Vista431040
Plymouth404982
Lee392658
Marion369177
Jones301257
Henry301037
Bremer292763
Carroll286252
Boone271234
Crawford270841
Benton262755
Washington259851
Dickinson250745
Mahaska232551
Jackson225842
Kossuth219166
Clay217327
Tama213372
Delaware211743
Winneshiek200636
Buchanan196734
Page195422
Cedar192923
Hardin191144
Wright189140
Fayette188243
Hamilton186851
Harrison181973
Clayton173057
Butler167835
Madison167719
Floyd164642
Mills163824
Cherokee161538
Lyon160941
Poweshiek159036
Allamakee155552
Hancock153134
Iowa148324
Winnebago145731
Calhoun143113
Cass140855
Grundy139333
Emmet136741
Jefferson134535
Sac132620
Shelby131838
Louisa130249
Union129535
Appanoose128049
Franklin127823
Mitchell127243
Chickasaw125717
Guthrie124532
Humboldt124526
Palo Alto114924
Montgomery106738
Howard105322
Clarke102424
Monroe100633
Keokuk99932
Ida92735
Adair89632
Davis86825
Pocahontas86822
Monona85931
Greene79111
Osceola79017
Lucas77423
Worth7568
Taylor67112
Decatur6629
Fremont64810
Ringgold56824
Van Buren56718
Wayne56323
Audubon52913
Adams3494
Unassigned90
Rochester
Clear
76° wxIcon
Hi: 87° Lo: 62°
Feels Like: 78°
Mason City
Clear
70° wxIcon
Hi: 89° Lo: 65°
Feels Like: 70°
Albert Lea
Clear
70° wxIcon
Hi: 87° Lo: 62°
Feels Like: 70°
Austin
Partly Cloudy
72° wxIcon
Hi: 88° Lo: 59°
Feels Like: 72°
Charles City
Partly Cloudy
68° wxIcon
Hi: 87° Lo: 61°
Feels Like: 68°
Heat Trend on Tap for Week Ahead
KIMT Radar
KIMT Eye in the sky

Latest Video

Image

The Curling Club of Rochester is at the Olmsted County Fair this year

Image

Motocross at Spring Creek National

Image

Larping group meets each Sunday

Image

Spring Creek Motocross

Image

Ryan's Evening Forecast (7/25/21)

Image

Med City Moonshots take on the Honkers

Image

Kasson Soldiers Rock Fundraiser

Image

Rochester Flyers work out at Detour Athletics

Image

Hot and Dry to Finish the Weekend

Image

Soldiers Rock fundraiser in Kasson

Community Events