Cyber attacks on payment systems – counting the cost
30 November 2023
Last month, detailing the potential global economic impact of a hypothetical cyber-attack on major financial services payment systems.
The model set out the three ways in which an attack can impact businesses:
- data breach;
- compromising data accuracy and validity; and
- prevention of access.
Detailed in the scenario, through the use of code attackers are able to infiltrate networks, providing access to perform a major breach. As the discovery and repair of a breach can be a lengthy task, throughout this period the attackers are able to divert funds.
The model highlights that the United States of America, China and Japan are the countries likely to experience the highest economic loss. Loss of confidence in the institution and an increase in costs to tighten regulations and increase resilience were also highlighted in the scenario.
In building the scenario, Lloyd’s and the Cambridge Centre for Risk Studies considered previous historic events such as:
- 2017 - Wannacry: A ransomware attack impacting Windows systems by encrypting contents and demanding a payment to decrypt. It was reported that the attack impacted 99 countries, with the NHS and companies such as Telefónica in Spain, Renault in France and FedEx in the USA being affected.
- 2017 - NotPetya: A malicious data encryption tool hidden in legitimate software that spread rapidly through trusted networks, therefore bypassing the processes in place to prevent ransomware. The attack was destructive, with the malware not being designed to be decrypted. found that the Russian military was ‘almost certainly responsible’.
- 2022 - Albania DDoS attack: A destructive cyber-attack against the Albanian government that disrupted government websites and public services. The attack involved the deployment of ransomware followed by wiper malware. with ‘high confidence’ that the attack was carried out by actors sponsored by the Iranian government.
For further considerations for insurers in regards to cyber-attacks, please see our CyberCube’s Global Threat Outlook: The evolving threat of cyber operations article in The Word’s September edition.
Related expertise
You may be interested in...
25 November 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
The ‘grate’ cheese robbery: Implications for insurance professionals
25 November 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Environmental crime and the impact for insurers
25 November 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
What might a Trump victory mean for the UK insurance industry?
25 November 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Post Office scandal: Lessons for underwriters
25 November 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Weather protection parametric insurance: A sign of things to come?
28 October 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Updates to the UK’s Arbitration Bill
28 October 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Ozempic: The rising costs and coverage issues of weight loss medication
28 October 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
ICAEW: Changes to PII requirements
28 October 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Contractor insolvency: Peabody Trust v NHBC
17 October 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
By a narrow 2 to 1 majority, the Court of Appeal finds in favour of insurers in the construction of an exclusion clause in a W&I policy
23 September 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
LMA binders’ consultation
23 September 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Smooth sailing ahead: The LMA's new Open Form Default Clause
23 September 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
PFAS: The issue that won’t go away
23 September 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Oklahoma earthquake: Racial discrimination in adjudication
23 September 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Vicarious liability for kinship foster carer abuse: Implications for local authority insurers
23 September 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Latest short-term insurance trends
29 August 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ - The Word
The Word, August 2024
29 July 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Words matter: Another case on the importance of accurate drafting
29 July 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
London Fire Brigade to stop attending for automatic fire alarms: Implications for insurers
29 July 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Navigating Oil Price Cap legislation: LMA issues revised Cargo and Hull wordings
29 July 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
It’s not cricket: Insurers change their mind about jurisdiction
27 June 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Multi-occupancy building insurance: Latest tribunal decision
27 June 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ - The Word
The Word, June 2024
28 May 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ - Consumer Duty
Updated UK Consumer Wordings Guidance: °ÄÃÅÁùºÏ²Ê×ÊÁÏ collaborates with the LMA
28 May 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ - Consumer Duty
From products to protection: The rise of embedded insurance
28 May 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
The European Accessibility Act: Inclusive products and services
28 May 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Final FCA anti-greenwashing rule guidance published
28 May 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ - The Word
The Word, May 2024
24 April 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
The Baltimore bridge collapse: One of the biggest losses in maritime insurance history?
24 April 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
The space data revolution
24 April 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
New guidance on supporting autistic customers for the insurance industry
24 April 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Chubb ordered to indemnify SXSW for Covid cancellation
28 March 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ - The Word
The Word, March 2024
05 March 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Commercial Court considers requests for stay or anti-suit injunction where two competing reinsurance wordings
01 March 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Insurers prevail once more in construction of an exclusion clause in W&I policy
27 February 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
Parametric flood policies - Insurers no longer in uncharted waters?
27 February 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
LockBit unlocked: °ÄÃÅÁùºÏ²Ê×ÊÁÏ taskforce takes down major cyber criminal organisation
27 February 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ - Consumer Duty
80% of GAP market pause sales amid Consumer Duty concerns
27 February 2024
°ÄÃÅÁùºÏ²Ê×ÊÁÏ
FCA writes to MPs over car insurance premiums. What do increases mean for fraud?
27 February 2024