With Claims Rising, Cyber Insurers Need More Than Sizable Rate Increases: Fitch

Cyber insurance underwriters are reporting substantially higher claims losses in 2020 than in prior years and as a result face increasing profit pressure.

insurers will have to achieve both significant premium rate increases and tighter coverage terms in order to stage a recovery in underwriting performance over the medium term, according to analysts at Fitch Ratings,

However, it will not be easy as a higher propensity of cyber incidents, particularly ransomware attacks, are likely to hinder a near-term reversal of claims cost trends, the analysts say.

Cyber insurance direct written premium (DWP) growth accelerated in 2020 with momentum continuing into 2021. Fitch estimates industry DWP for cyber coverage in standalone and package policies increased by more than 22% in 2020 to approximately $2.7 billion. That’s according to data compiled from cyber insurance supplemental filings in statutory financial statements.

Written premiums for standalone cyber coverage increased by 29% for the year, reflecting growing demand for specific cyber protection and insurers interest in reducing ambiguity in coverage relative to cyber risks included in package policies.

Premium rates for cyber coverage moved sharply upward in 2020 in response to poorer experience, a trend that is expected to continue.

Fitch says demand for coverage is driven by the need for risk management expertise and insurance protection by firms of all sizes due to incidence of network intrusions, data theft and ransomware incidents that have increased substantially in the last two years.

Cyber insurance continues to represent a modest portion of overall underwriting exposure to the P/C industry and individual insurers. However, a large unforeseen cyber event, such as a massive cloud intrusion or attack on infrastructure, could result in substantial individual incurred losses that could pressure capital levels and individual ratings, according to Fitch.

Underwriters, especially those new to the coverage, are challenged by limited historical claims and underwriting data.

Cyber Attacks on the Rise for Businesses, Pushing Many to the Brink: Hiscox

The direct loss ratio for standalone cyber rose sharply in 2020 to 73%, the highest level recorded in the six years that separate cyber data were included in financial reporting.

Remote Work

Risk exposures were meaningfully altered by the response of the coronavirus pandemic. The broad shift to a remote workforce, along with increased intrusions from phishing emails and other means, added stress to network security systems.

Premium rates for cyber coverage moved sharply upward in 2020 in response to poorer experience with average cyber renewal premium rates, up 11% YoY in 4Q20, according to the Council of Insurance Agents & Brokers’ Commercial Property/Casualty Market Survey, a trend that is expected to continue.

In addition to achieving price increases, insurers will need additional changes in risk selection and policy terms, including coverage exclusions and sub-limits, if they are to realize a significant turnaround in underwriting performance, according to Fitch, adding that any reduction in cyber incidents and losses will ultimately be tied to organizations implementing more effective risk prevention and event remediation measures.

The nature of cyber threats also hinders insurer efforts to diversify cyber underwriting portfolios and manage risk aggregations. Geographic diversification often does not offset cyber risk, as cyber incidents have proliferated globally. Regulatory data for Canadian P/C insurers shows the cyber net claims ratio jumping to 105% in 2020 from 39% a year earlier.

Source: Fitch Ratings