A malicious actor pretending to be tech support gained access to a manufacturing plant’s computer systems. That enabled them to pose as an insider, eventually gaining access to highly restricted information including customer trade secrets, bank details, and other sensitive personal information. The hacker threatened to sell trade secrets to competitors and banking details on the black market, and make sensitive personal information public – unless the insured paid.

Cyber Event Protection covers key response costs, including IT forensics, crisis management, and public relations, notification costs, credit, and identity monitoring, and pursuit costs against the perpetrator. It also covers mandatory data breach notifications, including notice to regulators because of the manufacturer’s failure to keep information secure. Defence and settlement costs for third-party claims made against the insured are also covered.

A retail clothing store operated an E-commerce website that became infected with malicious code. As a result, the website showed black screens to customers and staff could not access orders in the system.

The policy covers the removal of the malware and restoration of the website. The impact of lost revenue and increased costs caused by the attack is also covered.

An external supplier of a bedding manufacturer suffers a CryptoWall malware attack. It’s ‘just in time’ manufacturing plant grinds to a halt for three weeks while engineers and IT experts scramble to restore systems and production. As a result of the supplier’s cyber event, the insured could not source critical components, and manufacturing operations were interrupted.

If Contingent Business Interruption cover is applicable, we would pay the bedding manufacturer’s impact on business costs arising from an outage at the external supplier’s business.