Cyber

Loss scenarios from internal cyber threats

11/2021
shadow of walking people

Companies must remain vigilant about how their business would be affected if they were impacted by a cyber incident.

This list of loss scenarios from internal Cyber threats explains the potential impact on a client’s business and describes how Chubb’s Incident Response Platform helped contain the Cyber threat:

*All currencies indicated are in USD

Scenario: Employee error

A Recruiter for a healthcare organisation accidentally attached the wrong file when sending an email to four job applicants. The file included HR demographic data consisting of 43,000 former employee names, addresses, and national ID numbers.

The insured telephoned the Chubb Incident Response Hotline for assistance and an Incident Response Manager was assigned. Chubb brought in Legal counsel to manage regulatory implications.

Potential impact

Privacy liability
 

mismanagement of personal and/or corporate confidential information, violation of company privacy policy:

  • Defence expenses arising from regulatory investigation - $73,800
  • Defence and settlement costs for claims employees that had identity stolen. - $184,400
     
Incident response expenses
 
  • Incident Response Manager Fees - $5,100
  • Notification of affected individuals - $3,700
  • Identity theft monitoring services for affected individuals - $20,700
  • Legal consultation fees. - $18,400
     

Total cost: $306,100

Takeaways

It is important to understand that cyber is not only related to technological incidents. As innocent as it may seem, human error can be very costly, and it occurs more frequently than expected.

Many of the claims Chubb see stem from very simple employee errors.

Scenario: Disparagement via email

An employee for a consultancy company sent an internal email containing negative comments regarding a service provider. The email was forwarded to others within the organisation and eventually was sent externally. The email was seen by the service provider and a defamation lawsuit was brought against the consultancy company for harming the service provider’s reputation.

Potential impact

Media liability
 

third party claims arising from the Insured’s internet media activities. Wrongful Acts include product defamation, disparagement, trade libel, false light, plagiarism, and more:

  • Defence and settlement costs for claims from service provider. - $18,400
     
Incident response expenses
 
  • Crisis communication services - $7,400
  • Public relations expert fees to minimise reputational impact - $5,900
  • Incident Response Manager fees. - $2,200
     

Total Cost: $33,900

Takeaways

Due to the sensitivity of such a claim and the potential damage to a client’s reputation, it’s important for companies act quickly to mitigate any potential loss or damage.

By ringing the Chubb Incident Response Hotline we can ensure the correct specialists such as PR consultants are appointed to work with the client and communicate effectively with the service provider to resolve issues and bring the matter to a conclusion.

Insights and Expertise

We keep you informed — and your business protected — with these helpful articles.
woman working remotely
Ten tips to stay cyber-safe when working remotely
Best practices for companies and employees to minimise Cyber Risks.
cyberspace
Tales from the dark web
Learn how criminals use the dark web, the myriad exposures it creates and why it’s important for organizations of all sizes to understand this digital underworld.
binary code
Hong Kong SME Cyber Preparedness Report 2018
We look at the types of cyber incidents SMEs in Hong Kong are facing, what their attitudes are towards these risks, and how they are managing the out-fall from incidents.
man with glasses in the dark
What is the dark web?
Learn what is dark web and the risks it can pose to you and your company.
handshaking for agreement
Small companies not under the radar for cyberattacks
A common misconception among small and medium enterprises (SMEs) is that their operations are too small to be noticed by predators and hence do not need cyber protection.
laptop keyboard
Managing data breaches
There’s no way to eliminate cyber risks like data breaches but there’re a variety of measures that can help businesses manage and mitigate risks.

Have a question or need more information?

Contact us to find out how we can help you get covered against potential risks.