Cyber insurance policyholders facing heavier scrutiny in underwriting, claims

A multiyear lull in insurance rates and insurers’ over-dependence on large U.S. policyholders have led to more restrictions and exclusions in coverage.
Enterprises holding cyber insurance policies are undergoing more scrutiny in their claims as rates decline and insurers scramble to remain profitable.
The stakes are high for both sides. Insurance companies around the globe increasingly fear their business is overly dependent on large U.S. policyholders, which make up nearly two-thirds of their global market share. They worry that one large supply chain event or outage could escalate and ultimately wipe out the cyber insurance industry as a whole.
Pulled Health-ISAC quote:
Errol Weiss, chief security officer at the Health Information Sharing and Analysis Center, said, “Organizations are really looking at what do we need to do to make sure that we can keep our major systems running if major IT systems start going down for whatever reason —whether it’s a bad guy or a bad update.”
Read the article in Cybersecurity Dive. Learn More
- Related Resources & News
- Health-ISAC Health Sector Heartbeat – Q2 2026
- Healthcare Cybersecurity Always Comes Back to People
- 2026 Health-ISAC CISO Benchmarking Report
- June Incident Response Insights
- New critical infrastructure cybersecurity framework features government, regional council options
- Frontier AI in the Health Sector: Managing Supply Chain and Vendor Risk
- The State of Enterprise Cyber Crisis Readiness (report)
- Human Risk Management 90-Day Playbook
- Cybercriminals Flock to Healthcare Businesses as Attacks Surge
- DHS Revives Critical Infrastructure Threat Sharing, Without the Legal Shield Industry Wants