Cyber

Loss scenarios from internal cyber threats

12/2022
cyberspace

Companies must remain vigilant about how their business would be affected if they were impacted by a cyber incident.

This list of loss scenarios from internal Cyber threats explains the potential impact on a client’s business and describes how Chubb’s Incident Response Platform helped contain the Cyber threat:

Scenario: Employee error

A Recruiter for a healthcare organisation accidentally attached the wrong file when sending an email to four job applicants. The file included HR demographic data consisting of 43,000 former employee names, addresses, and national ID numbers.

The insured telephoned the Chubb Incident Response Hotline for assistance and an Incident Response Manager was assigned. Chubb brought in Legal counsel to manage regulatory implications.

Potential impact

Privacy liability - mismanagement of personal and/or corporate confidential information, violation of company privacy policy:

– Defence expense arising from regulatory investigation: $100,000

– Defence and settlement costs for claims employees that had identity stolen: $250,000

Incident response expenses:

– Incident response manager fees: $7,000

– Notification of affected individuals: $5,000

– Identity theft monitoring services for affected individuals: $28,000

– Legal consultation fees: $25,000

Total cost: $415,000

Takeaways

It is important to understand that cyber is not only related to technological incidents. As innocent as it may seem, human error can be very costly, and it occurs more frequently than expected.

Many of the claims Chubb see stem from very simple employee errors.

Scenario: Disparagement via email

An employee for a consultancy company sent an internal email containing negative comments regarding a service provider.

The email was forwarded to others within the organisation and eventually was sent externally.

The email was seen by the service provider and a defamation lawsuit was brought against the consultancy company for harming the service provider’s reputation.

Potential impact

Media liability - third party claims arising from the Insured’s internet media activities. Wrongful Acts include product defamation, disparagement, trade libel, false light, plagiarism, and more:

– Defence and settlement costs for claims from service provider, $25,000

Incident response expenses:

– Crisis communication services: $10,000

– Public relations expert fees to minimise reputational impact: $8,000

– Incident response manager fees: $3,000

Total cost: $46,000

Takeaways

Due to the sensitivity of such a claim and the potential damage to a client’s reputation, it’s important for companies act quickly to mitigate any potential loss or damage.

By ringing the Chubb Incident Response Hotline we can ensure the correct specialists such as PR consultants are appointed to work with the client and communicate effectively with the service provider to resolve issues and bring the matter to a conclusion.

Insights and Expertise

We help you stay ahead and informed with these helpful tips and tricks for protecting your home, car, and more.
cyber insurance

Top five cyber tips for SMEs

There are a handful of simple measures that SME business owners can implement to limit their exposure to a cyber attack.
SME cafe owner

Cyber Case Studies for SMEs

Understanding how your business could be affected by a cyberattack and preparing an incident response plan could save you from financial ruin.
cyber

A better way to define and insure systemic cyber events

Michael Kessler, Vice President, Chubb Group and Division President, Global Cyber Risk, discusses the evolving insurance market for widespread cyber risks, including common misperceptions and solutions.
infographic header

Are SMEs over confident about their ability to manage cyber risk?

Small Medium Enterprises (SMEs) in Australia believe they are less vulnerable to cyber risks than their larger competitors, according to Chubb's SME Cyber Preparedness Report.
cyber sme preparedness 2019 article

Australia SME cyber preparedness report 2019

Many SMEs unaware of their regulatory obligations. Do SMEs think they are above the law?
data management

Making data management a business priority

With nearly every type of business embracing digital channels and platforms, companies are collecting more data than ever before. The question is, do they have the experience or technological capabilities to manage it in the right way?

Have questions?

Ready to experience Chubb's unparalleled comprehensive insurance solutions? Speak to a broker today.