No Cyber Insurance Payout For Attacks By State or State-Supported Actors

Real-world consequences for poor attribution practices over the past 20 years

After the court’s decision in the NotPetya case where the judge determined that the War or Hostile Acts exclusion in Merck’s insurance policy was not applicable, and that the NotPetya cyber attack was in fact the hostile act of a nation state, there has been an ongoing effort by insurance underwriters to create bullet-proof language excluding coverage f…