Contact Us

What Is Cyber Insurance?

author avatar
By The Boost Team on Apr 7, 2023
5 min read
Icons representing security and finances are superimposed over a person's hands typing on a laptop.

In the digital age, companies rely heavily on technology to conduct their operations and manage sensitive information. However, with this reliance comes the risk of cyberattacks, data breaches, and other online threats that can have serious financial and reputational consequences. That's where cyber insurance comes in. 

In this blog post, we’ll explore what cyber insurance is, what it can cover, and why it has become an essential tool for managing the risks of conducting business in today's digital world.

What is cyber insurance?

Cyber insurance is a type of insurance designed to protect individuals and businesses from internet-based risks, such as data breaches, cyberattacks, and other types of cybercrime. It typically provides coverage for expenses related to the recovery from a cyber attack, including legal fees, public relations expenses, and other costs associated with responding to the attack.

Cyber insurance has become increasingly popular in recent years as the number and severity of cyber-attacks have increased, and more companies have come to rely on digital technology to conduct their business.

What companies should have cyber insurance? 

Cybercrime is rising across the board, and every company should take steps to protect themselves. 2022 had the second-highest number of data compromises in the U.S. in a single year, and the total cost of cybercrime is predicted to hit $8 trillion by the end of 2023, and grow to $10.5 trillion by 2025. For individual businesses affected, the cost can be significant: in 2022, the average cost for a data breach in the U.S. was $9.44M.

According to a Deloitte Center for Controllership poll, 34.5% of polled executives report that their companies were targeted by a cyber attack in the previous 12 months, 22% of those same executives reported that they actually experienced a cyber event, and 12.5% experienced more than one. Those are sobering statistics, but not all companies are taking the initiative to protect themselves against these crimes. According to the same Deloitte Center study, nearly half (48.8%) of C-suite and other executives expect the frequency and severity of cybercrime to continue to rise, but only 20.3% of those polled have cyber insurance. 

It’s recommended that all companies that operate online have some type of cyber insurance. If a company uses its website for business activities, such as storing customer information, making transactions, or communicating with clients, or if it utilizes a cloud storage service to store important data, having cyber insurance is a good safety measure.

How does cyber insurance work? 

The concept of cyber insurance is not very different from any other kind of insurance product. Instead of paying exorbitant costs to recover after a disaster has occurred, a company can buy a cyber insurance policy and pay a regular, predictable premium. Then, if the company suffers a cyber incident, they can make an insurance claim to recover some or all of their losses. This kind of risk management mitigates large, unexpected expenses and helps business owners to rest easier knowing that, in the event of a cyber attack, the company will receive the financial support it needs to recover.  

What kinds of risk does cyber insurance cover? 

Cyber insurance policies can vary widely depending on the provider and the level of coverage needed. They can cover losses resulting from unauthorized access to or theft of data, damage to computer systems or networks, and loss of income due to system downtime or interruption of business operations. They can also cover liability for damages caused to third parties as a result of a cyberattack. Standard cyber insurance policies generally cover things like: 

Breach Response

In the event of a breach, expenses related to investigating the breach, determining the cause of the incident, and notifying those who were impacted can rack up quickly. Not only can cyber insurance alleviate some of that financial hardship, but it can also cover expenses like monitoring the credit of affected customers, paying overtime salaries to employees who dealt with the situation, call center costs, public relations expenses, and other related costs. 

Cyber Extortion

If a business is experiencing cyber extortion, meaning that its website data or capabilities are being held hostage for payment, this coverage might cover the cost of investigating the extortion incident, engaging in negotiations, and paying ransom demands.

Defense, Fines, and Penalties

Whether by regulators or trade groups such as PCI, cyberattacks can sometimes result in fines or other penalties for the affected business. Insurance can cover the cost of defending a company if the breach results in a regulatory proceeding, and also the cost of potential resulting fines or penalties.

Business Interruption and Restoration 

A severe cyberattack can temporarily prevent the business from operating - for example, if the business is unable to access its data or process payments. Business Interruption and Restoration coverage can help to cover the cost of getting the business up and running again after a cyber incident. If a business is interrupted for longer than a certain period of time, this kind of coverage may also pay for revenue lost during that time.

Other coverages, if not included in a standard cyber insurance policy, may be available as endorsements:

Computer Funds Transfer 

Through phishing attacks and similar incidents, cyber criminals can gain access to accounts or credentials that allow them to initiate fraudulent bank transfers and steal businesses’ funds. This coverage reimburses victims for the lost money.

Hardware Replacement

Some cyberattacks can permanently disable computer systems (also called “bricking”). If a business with cyber insurance has their equipment bricked by a cyber incident, the cost of replacement may be covered by their policy.

Post-Breach Remediation

After a significant cyber incident, the business will need to repair and improve their systems to prevent similar attacks from happening again. This can include eliminating vulnerabilities, or making overall improvements to their systems. This work can be expensive, and is sometimes covered by cyber insurance.

Social Engineering

A large number of cyber attacks are enabled by social engineering, in which a scammer tricks someone at the business into sending money or sensitive information. Cyber insurance may reimburse the business for money lost if an employee falls for a scam.

Telecommunications Fraud

If scammers access the business’s telecommunications equipment and use it to run up fraudulent charges on their bill, cyber insurance may cover the amount lost.

Cyberattacks can be devastating for businesses, and the threat continues to grow every year. With the right insurance in place, however, businesses can have peace of mind knowing that even if cybercriminals strike, they’ll have the financial protection they need to get back on their feet.

If you cater to small to medium businesses and want to learn more about how you can grow your revenue by offering cyber insurance, contact us, or dive into building your insurance program with Boost Launchpad.

Previous articles
preview image
Ready for Liftoff: BHMS Backs Boost
Jul 31, 2024
Friends of Boost, Today Boost is thrilled to announce that we have secured a significant equity investment from BHMS Investments, setting the stage for an incredibly exciting next phase for this company and the amazing team that has built it brick-by-brick over the past seven years. With a rock-solid foundation firmly in place, this partnership is going to supercharge our growth, fuel more innovation, and cement Boost’s position as the go-to infrastructure platform in insurance. We are on a mission to empower MGAs, insurtechs, independent brokers and agents, wholesalers, embedded insurance providers, and really any company that just wants to build, transact, and operate more efficiently in this technology-enabled world of ours. While capital is great, today is about hard-earned validation for our team doing that the right way since Day 1.  BHMS is the perfect capital partner for Boost in terms of their insurance expertise and unquestionable track record in the space, but more importantly, they are fantastic people that share both our views on the industry and our principles of company building. The market is dangerously fixed for early and growth stage companies right now (and I say “fixed” intentionally). It’s incredibly easy to get picked off in an environment like that, so it takes a rare mix of both intellect and character to do the right thing when you’re on the capital side of that equation - and even more to be truly value-add to your portfolio companies. BHMS has that mix in spades and appreciated Boost for what it is, what it has accomplished, and what remains an incredibly high ceiling for this company vs. playing short-term charades with the herd. That’s our kind of investor. This investment isn’t just about the money—it's a resounding endorsement of Boost’s strength, credibility, and potential to make a truly meaningful impact on the insurance industry at scale. With BHMS now on board, alongside an incredible group of long-time strategic backers like Markel, RenaissanceRe, and Canopius, we’re ready to take our game to the next level. Our mission has always been to disrupt the insurance space with cutting-edge tech and unparalleled service, and this backing proves that disrupting responsibly is the only approach that works in our industry. Anyone can grow fast if they don’t care about quality or long-term credibility. At Boost, we underwrite profitably, we respect compliance, and we always - always - take a collaborative approach with our stakeholders across the entire value chain. As someone with literally zero patience, I can personally attest to that being incredibly difficult to do at times - but it scales.  Even with the market’s ups and downs, Boost has been a powerhouse of innovation in the insurtech landscape with equal commitment to disruption and reliability. Doing things the right way does not mean you cannot innovate - or even disrupt - and leveraging best-in-class technology is not a right reserved for #insurtechs. Our platform has always been a one-stop shop for insurtechs and embedded insurance providers and MGAs, independent agents and brokers, and wholesalers alike - offering everything from product development to underwriting and program management to claims administration and reinsurance capacity. With our proprietary tech and a dream team of industry pros, we’re delivering smarter, more efficient solutions than ever before.  Since our first program launched in 2019, we’ve underwritten over $200 billion in coverage, which is a somewhat staggering figure in hindsight. Today we’re proud to support programs for giants like Amwins along with trailblazers like Cowbell, Newfront, and Wagmo, and we’re grateful for all of the companies that chose to build with Boost even when Boost itself was just getting started. Our steady, disciplined approach has kept our portfolio profitable and we like to think that has kept our partners in front of us very happy as well.  All of Boost’s success is thanks to what is hands down the best team in the industry. Hard stop. Their grit, dedication, and willingness to tackle tough challenges head-on has been crucial. Boost’s commitment to quality starts with our team and is reflected in them every single day. We keep things lean at Boost because that quality always outperforms quantity. Even if that approach always requires more from each individual and makes the stakes a bit higher, working with the right people makes the returns on each long hour invested that much more gratifying.  Few people exemplify those principles or have demonstrated such an unwavering commitment to Boost more than Jeremy Deitch, so I am also thrilled to announce that Jeremy has been promoted to President at Boost and will join me on our Board of Directors. Jeremy’s leadership has been critical since the day he started at Boost almost 6 years ago, following probably the most grueling interview process in our company’s history - one he is always happy to dramatize even more if you ever ask him. ;) I couldn’t be more grateful to have a partner like him as Boost soars to new heights. With this new investment, we’re geared up to boost (pun intended) our growth and expand our tech offerings. We’re planning to scale our MGA programs, roll out new products, and snap up some strategic acquisitions. Our goal? To make building a business in insurance easier, faster, and more efficient for everyone so they can better serve their customers.  We’re more fired up than ever about our mission to empower insurance providers with the tech and infrastructure they need to thrive. This partnership with BHMS is just the beginning. The future is bright, and we’re ready to lead the charge. Thank you to everyone who has been part of our journey thus far. Let's all keep pushing boundaries together - because the best is yet to come. Special thanks to the team at Howden Capital Markets & Advisory for helping Boost always say what it’ll do and do what it says. You can find our full press release here and, more importantly, can start joining our platform here All my best, Alex Maffeo CEO & Founder Boost Insurance
Continue Reading
Two business people work on a laptop in an office conference room.
What is a Cell Captive?
May 23, 2024
A captive is an insurance entity that a business creates, rents, or owns in order to self-insure risks. A cell captive, sometimes also called a protected cell captive or segregated cell captive, is a specific insurance captive structure that allows an entity to segment or separate business in one cell from that in another cell, so that a particular cell’s assets and liabilities are insulated from anything that happens in another cell (even if both cells are part of the same overall captive facility).  Using captives to self-insure risk offers businesses a number of benefits: they can participate in some or all of their program’s underwriting profitability, maintain end-to-end control over risk (including pricing and claims handling), and avoid paying significant overhead fees to a “middleman” insurer. Companies have several options for structuring and utilizing an insurance captive. They might build a single-parent captive, pool risk in a group captive, or make use of a cell captive. In this blog, we’ll take a look at each.  In a single-parent captive, a company will often partner with a fronting carrier to reinsure at least part of their own risk. These are most commonly used by very large companies with exposure to multiple lines of business, which they can insure through the same captive entity.  Example: A national food-delivery business wants to provide insurance to its restaurant partners, to protect against the risk of lawsuits related to food safety for meals delivered through the service. It discusses partnerships with several major insurance carriers, but none are willing to provide the level of coverage that the business is looking for at a reasonable price. To get what it needs, the food-delivery business sets up a captive to reinsure a fronting carrier partner, enabling the business to insure its own risk and provide the coverage it needs to its restaurant partners. Setting up a single-parent captive is a considerable undertaking with high capital requirements and a complex setup, with significant ongoing operational requirements going forward. In order to make sense financially, it usually requires a high volume of premium. For that reason, this option is usually only viable for very large businesses. For businesses that can’t afford (either in time or in money) to set up their own captive, a second option is to partner with other businesses in a related industry to set up a group captive. In this scenario, a single captive maintains portfolio capacity that can be shared by a group of entities. The entities can then pool risk together in the single captive. Example: Several real estate companies form a partnership to share a group captive to pool their similar risks. Each company contributes a certain amount of capital to fund the captive, and the capacity is shared among the partners. The participating real estate firms are then able to leverage the captive’s capacity to exercise greater control over their risk, and avoid paying high fees to middlemen. This can allow the partner businesses to share risk (and benefits) between them, and works well for trade associations and other groups of companies in related industries, that share similar risks. However, since the fund is shared between partners as well, one partner’s negative returns can impact the other partners involved.  In a cell captive, the business first sets up an entity called a core, which is a similar process to setting up a single-parent captive. Once the core entity is complete, however, the business can much more easily spin up additional cells within the captive structure. The financials for those individual cells are separate from each other, rather than the combined funding of a single-parent or group captive. For many companies, however, using a cell captive doesn’t mean building one themselves. While there are use cases for single-parent cell captives, most businesses that create them then rent out cells to other businesses. Using a cell in another company’s captive entity (also called captive-as-a-service) allows a business to reap the benefits of an insurance captive at a much lower cost. We’ll look at some examples in the next section. The first step in creating a cell captive is to create the “Core” entity. This process is similar to building a single-parent captive:  Once the core captive entity has been created and adequately funded, the owner can spin up individual cells within the captive’s structure to support different lines of business, segments, or partners. The Department of Insurance will still need to approve all new cells, but the process is much more streamlined than in prior cases. New cells can often be set up in weeks instead of the months or years typically needed for entirely new captive entities.  Captive cells’ assets and liabilities are then statutorily protected from each other (which is where the ‘protected cell captive’ name comes from). This means that if one cell has a difficult year and experiences significant underwriting loss, the assets of the neighboring cells can’t be used to fund that loss.  There are multiple ways that cell captives are used, including offering captive-as-a-service (also called rent-a-captive) to other partners or businesses, and separating different parts of the parent company’s business for performance tracking.  In a captive-as-a-service or rent-a-captive scenario, the company that owns the captive core would allow other businesses to use cells in its captive. For a fee, the owner can set up a new cell specifically for the partner business, and manage it on their behalf. This lets the partner business leverage the owner’s infrastructure to achieve many of the same benefits of a single-parent captive, without the cost and complexity of creating one. Example: An insurtech specializing in commercial insurance has built a very strong customer base, and wants to further grow its business by participating in some of its own risk. However, building a full captive is too resource-intensive for the insurtech to take on. Instead, the insurtech partners with a CaaS provider and rents a captive cell. The insurtech then uses the cell to self-insure some of its risks, enabling it to participate in the underwriting returns and further scale towards a full-stack insurance business.  While the most common reason for building a cell captive is to rent out cells to other businesses, there are a few reasons a company might build one for its own use. Because the cells’ financials are statutorily separated from each other, a cell captive allows a large enterprise to delineate between different lines of business or geographic regions, and monitor their performance separately. Example: A nationwide property management company offers several insurance products to its customers to help protect their personal property and finances.  For planning and budgeting purposes, each line is supported by an individual cell in the management company’s cell captive. Over the course of the fiscal year, several lines perform over their targets, while one line significantly underperforms. The other LOBs’ budgets are unaffected by the low-performing LOB’s losses, and the company has clear visibility into which of its products are doing well and which may need a course correction. Cell captives provide a number of benefits to both their owners and the end users: Cell captives are popular for a reason: they offer significant value to both the companies with the resources to build them, and the companies that would rather rent a cell than build a single-parent entity from scratch.  To learn more about Captive-as-a-Service with Boost, contact us.
Continue Reading
The text "Trends at Money 20/20 2021" appears in white lettering over a dark-colored abstract background
Partnerships and Focus: Big Trends at Money20/20
Nov 3, 2021
It was a busy October for the team at Boost Insurance, wrapping up with one of our favorite industry events: Money20/20. The conference was a super interesting contrast to ITC which was laser-focused on insurance, while Money 20/20 was more about fintech in general and much, much bigger! With fintech about ten years ahead of insurtech in terms of maturity, it’s interesting to see the level of innovation and diversity of companies in our big brother industry. Here are some of the big trends we noticed. One of the really interesting trends that kept being repeated at Money20/20 was a shift in mindset among both fintechs and banks. In the past, they have tended to see each other as competition for consumers’ business and attention but now everyone is moving towards viewing each other as complementary vs. competitive.  We saw multiple collaborative efforts between the upstarts and the established, working together to create a better customer experience. This works because they each have a specialization (fintechs excel at meeting modern consumer expectations and banks are experts in profitably navigating a very regulated, very complex business), and partnership lets them bring both those strengths to the table.  This was extra interesting to us at Boost because it reflects what we see in insurance, with insurtechs and carriers working together and bringing their own strengths together to meet modern consumer needs and expectations. For example - Boost has built a modern tech platform making various insurance products available via API but partners with established reinsurance companies to facilitate risk transfer. There will still be winners and losers between the incumbents and the upstarts, but as collaboration and competition continue consumers will be the clear winners. A trend I’ve written about before, and one that we continue to see play out, is tech companies’ focus on affinity groups. Fintechs are springing up all over with explicit goals of serving a relatively narrow group of people and serving them well. Companies like Paceline for people focused on health and wellness, Daylight for the LGBTQ+ community, and First Boulevard for African-Americans are just some of the fintechs concentrating on being the best option for a specific set of consumers.  This is pretty much the opposite of traditional one-size-fits-all programs - instead of creating something broad that can be good enough for the biggest slice of people, creating something very targeted that can be great for a specific niche. This trend is great news for consumers who traditionally have not been served well by financial services in general. At Boost we’re starting to work with more affinity-focused companies because our modular, customizable product structure allows partners to tailor insurance for their customer needs. It’s exciting to be part of making insurance more accessible to all groups of people! Finally, it was really exciting and validating to see so much interest in new approaches to traditional industries. Finance and insurance have historically had a reputation for being very slow to change, sometimes for good reason (highly regulated, handling people’s money is a big responsibility, etc). This year though there’s a ton of interest in potential innovations, look no further than the enormous presence of blockchain and crypto-focused companies at Money20/20! Boost met with a TON of different companies during the show, and we cannot talk about anything yet but be on the lookout for some very interesting things coming in the near future! Money2020 was a heck of a conference and while my conference year is wrapped, the Boost team will be out and about at shows the rest of the year. We are looking forward to more opportunities to meet people in 2022, so if you did not get a chance to connect with us at Money2020, just drop us a line.
Continue Reading