Cyberattacks, including hacks, ransomware and malware attacks, are on the rise. Nearly every industry has been or could be affected, including professional and financial services, manufacturing, distribution, health care, education, tech, retail, energy, government and non-profit. Experts believe this trend will only continue. But insurance may be able to help manage the growing risks, as Lisa Szymanski and Adrienne Kitchen discuss in this episode.
----more----
Transcript:
Intro: Hello, and welcome to Insured Success, a podcast brought to you by Reed Smith's insurance recovery lawyers from around the globe. In this podcast series, we explore trends, issues, and topics of interest affecting commercial policyholders. If you have any questions about the topics discussed in this podcast, please contact our speakers at insuredsuccess@reedsmith.com. We'll be happy to assist.
Adrienne: Welcome back to Insured Success. I'm Adrienne Kitchen, and I'm joined by Lisa Szymanski. Cyberattacks, including ransomware, business email compromise attacks, third-party breaches, network intrusions, inadvertent disclosures, and malware attacks are on the rise. Nearly every industry has been or could be affected, from professional and financial services to manufacturing and distribution, healthcare to education, tech to government, and non-profits and retail to energy. And experts believe this trend will only continue.
Lisa: The cyber threat landscape is quickly evolving, creating new and unique risks. Data and privacy breaches are disruptive, expensive, and embarrassing, and many lead to litigation. Malicious attacks are on the rise. So it's a question of when, not if, a business will suffer a data breach.
Adrienne: That's right, Lisa. And most states, including D.C. And the U.S. minor outlying islands, have data breach notification statutes. A handful of states have statutes mandating methods by which businesses must secure data. The federal government also has enacted several statutes and regulations addressing data privacy and security in different realms, from health to finances and government to family.
Lisa: With respect to insurance, traditional insurance like commercial general liability policies typically exclude losses arising from a data breach. However, other policies like employment practices liability policies, directors and officers policies, errors and omissions, and even property policies may provide some cover. This is because security breaches may give rise to claims against management, commercial crime policies may cover certain direct losses, and computer fraud and property policies may provide cover for damage to types of electronic data.
Adrienne: An often overlooked, unpurchased, optional feature of some cyber policies is system failure insurance, which is usually triggered by an unplanned outage of a computer system resulting from operator error, erroneous updates of software, or a similar unintentionally damaging maintenance of computer systems. Another often overlooked aspect of cyber policy is customer attrition, which provides cover for lost profits due to a residual loss of customers following a service interruption.
Lisa: Data security and privacy liability policies may be placed as standalone policies, or coverage sections in package policies, or endorsements to traditional liability policies. All of this cover is relatively new, so the forms vary significantly and are always evolving. Data security and privacy liability insurance is negotiable, and policyholders should compare the policies and try to obtain bespoke coverage whenever possible. Generally speaking, data security and privacy liability policies may cover several risks, including, for example, misappropriation of private information, unintentional disclosure of private information leading to a risk of or actual identity theft, failure to protect confidential information from misappropriation or disclosure, failure to disclose or notify vi
Show more...