Cyber Insurance

Be cyber confident with a globally trusted policy

In today's digital world, businesses are increasingly exposed to new and evolving cyber crime, putting key assets like finances and customer data at risk. That’s why Travelers offers robust and thorough cyber cover – from prevention education to impact mitigation.

Our cyber insurance policy offers an industry-leading and comprehensive product selection, and we have doubled the size of our cyber team to better assist our partners and customers. With Travelers, businesses can count on cyber protection from every angle. Pre. Post. Always.

In a world of growing digital crime, cyber operations don’t always go to plan. Travelers offers expertise you can count on to both prevent and address the evolving digital risks businesses face, thanks to a detailed and bespoke underwriting and risk management process.

• Financial strength. Financial strength and stability with international reach.
• Experience & expertise. Long-term industry experience combined with deep specialist underwriting expertise.
• Superior claims service. Expert Claims teams focused on delivering superior service.
• Dedicated risk managers & consultants. Access to risk consulting from trusted experts.
• HCL Technologies services. Pre-breach services/coaches; training; free one-hour consultation.
• SentinelOne® platform. Access to SentinelOne platform for 60 days at no additional cost for current cyber policyholders.
• NetDiligence® eRisk hub. Access to the NetDiligence eRiskHub portal for policyholders and brokers.
• Cyber breach hotline. 24/7/365 access to a team of experts to respond fast to your breach needs. Tel +44 (0)800 587 8388 (press 2 for cyber).

It takes only one cyber event or data security breach to impact a company's financial results, or even put them out of business. One resourceful hacker, virus or system glitch could shut down an entire network within minutes, paralysing operations and, ultimately, the ability to earn income.  

CyberRisk Insurance from Travelers has a range of advantages to aid both prevention and recovery regarding these events.

Pre-breach

• Endpoint Detection and Response (EDR) solution via SentinelOne – 60 days access at no additional cost
• Cyber Resilience Readiness Assessment – online assessment to understand a policyholder’s current cybersecurity position
• One hour of professional cyber security coaching to help businesses interpret the results of the assessment and understand how to implement preventative measures  
• Risk Management Expertise – topical insights on cyber trends

Post-breach

• Betterment – an insurance clause that provides coverage for costs to improve a computer system after a security breach, when the improvements are recommended to eliminate vulnerabilities that could lead to a similar breach
• Existing access to Travelers’ data breach coach partner
• Benefit of access to the Travelers U.S. panel of pre-approved experts who will be available to provide support in a number of areas including:
  • Forensic investigation
  • Forensic accounting
  • Notification/Credit monitoring
  • Public relations/Crisis communication
  • Distributed denial of service attack response
• Customers also have the flexibility to work with specialists of their own, subject to a quick approvals process by Travelers

Always 

• Our response team is at the heart of our cyber offer, available 24/7. With a dedicated incident manager, specialist IT forensics and reputational experts all working together to minimise the impact of a breach. Our role is to put a virtual arm around a business’s shoulders and guide them through the process to resolution
• Cyber awareness training needs – various training modules available exclusively for Travelers’ policyholders 
• Risk management advice from our in-house resource

Pre. Post. Always. Cyber protection from every angle.

Find out who to contact.

Our new cyber safety tool, developed by The Association of British Insurers, allows companies to self-assess risks and plug the gaps in their cyber set-up with a free, tailored plan. 

Discover the cyber safety tool.

Learn how comprehensive cyber insurance from Travelers has helped these businesses.

International ransomware attack

The Policyholder (PH) reported that they discovered that their IT system had been infected with malware. They subsequently discovered that the malware was a new strain of ransomware that the PH’s antivirus detection system was unable to detect. The virus quickly infected and encrypted systems throughout the PH’s organisation, including their offices in the United States and the United Kingdom. All systems were locked, the PH closed all of its field offices and operations as their headquarters were significantly impacted.

The PH received a ransom demand of £10,000 in bitcoin to unlock the encryption. The ransom was paid but the encryption key was not released.

As a result, the PH was required to restore system operations from their backup files. Although the PH had backup files that were only a few days old, restoring full capacity system-wide took more than two weeks.

In addition, there was some indication of compromise of confidential information stored within the PH’s system. It became necessary to conduct a forensic investigation to determine the extent of the intrusion. There were ultimately no third-party claims. The total insured loss was more than £70,000. The major expense items were: a breach coach, a forensic consultant, business interruption and other expenses.

Municipal ransomware attack

This Policyholder (PH) discovered this incident when she attempted to access data and was unable to open an application. Ultimately, all of the PH’s software applications were impacted and locked out, including all Microsoft Windows applications and all mainframe applications. The PH then received a ransom demand. At the time of the demand, all of the PH’s system applications were locked out, including emergency services and local authority systems.

A forensic investigation confirmed that the malware placed on the PH’s systems was designed only to encrypt – there was no exfiltration of data and no access to or acquisition of personally identifiable information. The PH received an email from the cyber-criminals containing a ransom demand, and subsequent follow up confirmed that the cyber-criminals were located outside of the UK.

The cyber-criminals demanded a ransom of £5,000 to £8,000 payable in bitcoin. The ransom was ultimately negotiated and paid through use of a breach coach, and the decryption key was released, allowing the PH to restore full system functionality.

The total insured loss was more than £25,000. The major expense items were: a breach coach, a forensic consultant, payment of the ransom and expenses related to restoring the PH's system.

Phishing attack

This matter arose from a phishing attack that occurred when cyber-criminals posing as Microsoft employees tricked a Policyholder’s (PH) employee into granting remote access to its system. Once access was granted, the cyber-criminals accessed more than 12,000 individual patient records dating back to 1994. The PH’s IT department and a forensic investigator confirmed that the personally identifiable information of current and former clients had been stolen, including driver’s licence numbers, dates of birth and national insurance numbers.

A breach coach was retained and coordinated notice and communication with the ICO and other relevant authorities. In addition, the breach coach coordinated notice to the impacted individuals. The notice required a press release, individual written notice, staffing of a call centre and credit monitoring for clients who elected the coverage. There were no third-party claims made before or after notice to the current and former clients.

The total insured loss was more than £50,000. The major expense items were: a breach coach, a forensic consultant, public relations expenses, notice and call centre expenses, and the cost of credit monitoring for clients who requested the service.