Cyber insurers including MSIG, QBE and Beazley are reworking policy wording because autonomous AI systems can cause losses without a human attacker or stolen credentials, according to eight industry executives and analysts. Most are clarifying how existing cover applies rather than adding exclusions, though some are discussing carve-outs for events where one AI model harms many organizations at once. Pricing remains difficult because there is little claims history.
What changed
Cyber policies assumed a human attacker or unauthorized access as the trigger for a payout.
What it unlocks
Buyers of cyber cover can ask insurers how policy wording treats losses caused by autonomous AI systems using access they were given.
- cyber insurance market ~$15bn last year
- ~$28bn projected by 2030
- ~20% of cyberattacks AI-involved by 2027
Sources