July 23rd, 2024

Insurers' losses from global IT outage could reach billions

Insurers face billion-dollar losses due to a global IT outage caused by a faulty update from CrowdStrike affecting 8 million Microsoft Windows devices. Cyber insurance claims are expected to surge, impacting various sectors. Beazley remains positive, anticipating market changes.

Read original articleLink Icon
Insurers' losses from global IT outage could reach billions

Insurers are facing potential losses in the billions following a recent global IT outage that disrupted industries worldwide. The incident, caused by a faulty update from security firm CrowdStrike affecting over 8 million devices using Microsoft Windows software, highlighted the systemic cyber risks present in today's interconnected software ecosystems. Experts anticipate a significant impact on cyber insurance claims, with estimates ranging from $1 billion to potentially higher figures. While some policies may mitigate losses through waiting periods and distinctions between cyber attacks and IT outages, various sectors are expected to experience business interruption and potential property damage claims. Despite the challenges, some insurers like Beazley remain optimistic about their profit guidance for the year. The event is seen as a potential catalyst for the cyber insurance market, potentially increasing demand and stabilizing prices after recent fluctuations. This incident serves as a stark reminder of the importance of robust cyber insurance coverage in the face of evolving cyber threats in the digital age.

Related

Microsoft/Crowdstrike outage ground planes, banks and the London Stock Exchange

Microsoft/Crowdstrike outage ground planes, banks and the London Stock Exchange

A cybersecurity program update failure caused global disruptions affecting businesses and services like United Airlines, McDonald’s, and the London Stock Exchange. Microsoft and CrowdStrike faced issues, but the problem was resolved without a cyberattack. CrowdStrike's shares dropped 20%, and Microsoft's fell 2.9%. The incident, involving Windows and security software, is one of the largest IT outages, surpassing past disruptions.

Global IT Collapse Puts Cyber Firm CrowdStrike in Spotlight

Global IT Collapse Puts Cyber Firm CrowdStrike in Spotlight

A faulty patch from CrowdStrike Holdings Inc. caused a global IT collapse, impacting various sectors. CrowdStrike's shares dropped by 15%, losing $8 billion. The incident emphasized the importance of endpoint protection software.

Microsoft has serious questions to answer after the biggest IT outage in history

Microsoft has serious questions to answer after the biggest IT outage in history

The largest IT outage in history stemmed from a faulty software update by CrowdStrike, impacting 70% of Windows computers globally. Mac and Linux systems remained unaffected. Concerns arise over responsibility and prevention measures.

2024 CrowdStrike incident: The largest IT outage in history

2024 CrowdStrike incident: The largest IT outage in history

A faulty update by CrowdStrike led to a global computer outage affecting airlines, banks, hospitals, and government services. Over 3,200 flights were canceled, emphasizing the need for strong cybersecurity.

CrowdStrike IT outage affected 8.5M Windows devices, Microsoft says

CrowdStrike IT outage affected 8.5M Windows devices, Microsoft says

Microsoft reports a major global IT outage due to a faulty CrowdStrike update affecting 8.5 million Windows devices. Cybersecurity measures are stressed to prevent further disruptions and hacking attempts.

Link Icon 2 comments
By @tonetegeatinst - 3 months
I'd be shocked if some regulation or massive fallout didn't happen from this.

But at the same time, its most likely multiple failures that compounded to reach this. How cloudstrike handles this will be showing. On one hand you can understand that cybersecurity is a fast paced enviorment and sometimes that means rapidly tweaking and updating your signature methodology and constantly creating new methods to identify threats. But on the other hand if those updated filters and identification techniques generate false positives you lose trust. Like someone said on YouTube its surprising they don't do slow rollout, but then when you consider how important some clients are.....I'd bet clients don't want to be stuck as an A/B tester when the new configs could be stopping potential threats.

I'm newer to the security industry so please give me feedback on what my thought process is here, and any comments related to how you protect critical infrastructure in a rapidly changing threat environment.

By @mindslight - 3 months
It hurt itself in its confusion! Serves them right for mandating RAT trash to begin with. Surprise surprise, it turns out centralized control can end up being harmful.

"Are you going to indemnify me for the damage it causes" should be the reflexive response to anybody pushing checkbox security.