Just released: How to raise venture capital in 2023

Download

Year in Review: 2014 Cyber Attacks (What Startups Should Know)

Carl Niedbala - Founder Shield
Carl Niedbala

COO & Co-Founder

2014 Cyber Attacks Reviewed

For the last four years, cyber risk management firm Net Diligence has done a report on cyber insurance claims for the year…and 2014 has been a hell of a year for cyber attacks.  This year’s report has been published and has some very interesting findings pertaining to the startup community.  An excerpt from the introductory pages reads:

“For this study, we asked insurance underwriters about data breaches and the claim losses they sustained. We looked at the type of data exposed, the cause of loss, the business sector in which the incident occurred and the size of the affected organization. For the first time, this year we also looked at the two additional data points: was there insider involvement and was a third- party vendor responsible for the incident.”

While the general claims data is valuable, the 3rd party vendor data is particularly important for startups.  From AWS to Heroku to WordPress, almost all startups use a slew of these vendors to host and deploy their apps and content.

Here are the biggest takeaways from this year’s study:

  • Startups accounted for roughly 23% of claims reported.  The study considered 3 revenue ranges for “small revenue” companies.  Companies under $2B accounted for 75% of the claims studied and companies under $50M in revenues accounted for 23%.
  • 20% of claim situations arose due to an error of a 3rd party vendor.
  • Healthcare and financial services were the 2 most frequently breached areas, collectively accounting for 55% of the studied breach incidents.  The study notes that the healthcare space has seen a rise in claims due to a more aggressive approach taken by state attorney generals in recent years.
  • The average cost to defend a data breach claim was $698,797.  The average cost for legal settlement was $558,520.

The key takeaway here is that while Home Depot and Target have received most of the data breach press over the last year, it doesn’t mean that startups are any less of a target.  Furthermore, some of the areas most ripe for disruption – Healthcare and Fintech – are particularly exposed to cyber risks.  A base level cyber insurance policy with $1M limits can go a long way for a company that plans on making big waves in one of these areas.


You can download/view the full report here.  Check out our coverage page to learn more cyber insurance (and other important coverage) and reach out to talk to someone.

 

Related Articles

fintech rules and regulations
April 11 • Risk Management

Fintech Rules: Regulations Finance Leaders Need to Know

Master the fintech rulebook! This post breaks down essential regulations finance leaders must understand to ensure their business operates compliantly in the ever-evolving fintech landscape.

cyber insurance pricing trends 2024
March 13 • Cyber Liability

Cyber Insurance Pricing Trends 2024

Uncertain about cyber insurance costs in 2024? Our article explores pricing trends, expert predictions on rate increases, and strategies to potentially reduce your cyber insurance premium.

cyber liability insurance premiums
March 4 • Cyber Liability

7 “Must Haves” For Cyber Liability Insurance in 2024

With cyber liability insurance premiums rising, business leaders must have the inside scoop to keep costs low. Our partners at Blacksmith InfoSec delve into those tips and tricks.

fintech legal risks
February 29 • Risk Management

7 Legal Issues Every Fintech Should Avoid (and How to Diffuse Them!)

With the emergence of new and disruptive technologies, it’s no surprise that fintech legal risks abound for this innovative industry. Let’s break down these threats and provide solutions that will keep pace with the market.

leverage business insurance
February 27 • Risk Management

How to Leverage Your Business Insurance — 5 Tips

When was the last time you considered how to leverage your business insurance? It’s more than a safety net. In fact, this approach can give you a unique edge. Here’s how.

saas cyberattacks
December 11 • Risk Management

How SaaS Companies Can Avoid New Cyberattacks in 2024

Avoiding SaaS cyberattacks means teaming innovative technologies (like AI) with traditional risk management (like education) to stay ahead of the curve. We can show you how.