Business Daily Media

Men's Weekly

.

New data privacy trends help drive growth in frequency and severity of large cyber claims: Allianz

  • Frequency and value of large cyber insurance claims up 14% and 17% year-on-year in the first half of 2024, with data and privacy breach-related elements present in two thirds of these losses
  • Growing trend in the US for class action litigation against large US and international corporations related to privacy violations leads to surging costs
  • Number of cyber claims overall expected to stabilize in 2024 after 30% increase in 2023

SINGAPORE - Media OutReach Newswire - 9 October 2024 - Cyber claims have continued their upwards trend over the past year, driven in large part by a rise in data and privacy breach incidents, Allianz Commercial warns in its annual cyber risk outlook.

The frequency of large cyber claims (>€1mn) in the first six months of 2024 was up 14% while severity increased by 17%, according to the insurer's claims analysis, following just a 1% increase in severity during 2023. Data and privacy breach-related elements are present in two thirds of these large losses. Overall, the total number of cyber claims in 2024 is expected to stabilize, following a 30% increase in frequency during 2023, which resulted in 700+ claims.

"The growing significance of data breach losses among cyber insurance claims is driven by a number of notable trends," explains Michael Daum, Global Head of Cyber Claims, Allianz Commercial. "A rise in ransomware attacks including data exfiltration is a consequence of changing attacker tactics and the growing interdependencies between organizations sharing ever more volumes of personal records. At the same time, the evolving regulatory and legal environment has brought an uptick in so-called 'non-attack' data privacy-related class action litigation, resulting from incidents such as wrongful collection and processing of personal data – the share of these claims has tripled in value in two years alone."

'Non-attack' claims increase as privacy litigation ramps up

The rise in 'non-attack' data privacy claims is the consequence of developments in technology, the growing commercial value of personal data, and a developing regulatory and legal landscape. For example, unlike the EU's General Data Protection Regulation (GDPR), privacy regulations in the US are less prescriptive and open to interpretation, while plaintiff lawyers are hungry for potential sources of revenue. This is creating a grey area that is ripe for class action litigation, the report notes.

"We are seeing more data privacy breach claims in the US where there is a growing trend for class action litigation against large US and international corporations related to privacy violations, such as around consent and data usage," says Daum. "The cost of some of these claims can be even larger than a ransomware incident, in the hundreds of millions of dollars."

Over the last year in particular, data breaches have emerged as one of the fastest growing areas of US class action litigation. Over 1,300 were filed across a wide range of data privacy regulations in 2023, more than double the number filed in 2022 and four times that filed in 2021, according to law firm Duane Morris.

Multiple class action lawsuits have been launched against organizations across a wide range of industries, including healthcare, social media and gaming, for using tracking tools such as Meta Pixel to monitor consumer behavior, while entertainment streaming platforms have also been targeted, alleging that they may have violated privacy protection rights. Large data breach events can also evolve into hyper litigation, with one event triggering a slew of class actions. More than 240 lawsuits related to the 2023 MOVEit data breach were consolidated into a single Multidistrict Litigation in October 2023. And with large numbers of claimants, there are incentives for parties on both sides to settle. The top 10 data breach class action settlements last year totaled $516mn, a significant increase over the $350mn recorded in 2022.

The risk of data breach litigation is also growing in Europe. Heightened awareness of data protection rights, a rise in the availability of third-party litigation funding, and a more consumer friendly litigation environment could make mass data privacy claims a reality, albeit not on the same scale as the US, the report notes.

Asian companies must not rest on their laurels

Worldwide, the average cost of a data breach reached an all-time high in 2024 of $4.9mn. In comparison, the average data breach costs in Japan, South Korea, ASEAN, and India are $4.19mn, $3.62mn, $3.23mn, and $2.35mn respectively, according to IBM's Cost of a Data Breach Report 2024.

"Despite the relatively lower loss severity in Asia compared to other regions, companies need to stay vigilant as there is a noticeable uptick of cyber incidents in the region. One of the contributing factors is the gradually evolving cyber security maturity. Furthermore, a considerable number of outsourced technology service providers are located in Asia, which constantly attracts threat actor interest. The aim of the supply chain attack vector is to gain access to multiple victims," says Karlis Trops, Head of Cyber and Tech Professional Indemnity, Allianz Commercial Asia.

"Companies in Asia can further strengthen cyber resilience and preparedness. Notwithstanding the implementation of new privacy regulation and cyber security acts, as well as mandatory cyber security incident reporting by some countries in the region in recent years, investment in cyber security controls by companies in Asia in general lags compared to their peers in other regions such as USA and Europe."

AI to power and prevent future data privacy breaches

The fact that almost every industry is now using artificial intelligence (AI) will have a significant impact on the cyber and privacy risk landscape in future. AI relies on the collection and processing of vast amounts of data, including personal, health and biometric information, for training AI models and making predictions or recommendations. But AI tools such as chatbots can create potential privacy, misinformation, and security risks if not properly managed. With so much data being collected and processed, there is a risk that it could fall into the wrong hands, either through hacking or other security breaches. There are also concerns around potential breaches of privacy laws, such as whether organizations have proper consent to process data through AI.

From data exfiltration to data protection

Despite a general trend for increased investment in cyber security in recent years, many data breaches, including some of the largest mass data exfiltration cyber-attacks over the past 18 months, are the result of weak cyber security within organizations and/or their supply chains.

Such incidents can lead to a large claim involving regulatory fines, notification costs and third-party litigation, in addition to extortion demands, first party costs and business interruption.

"The insurance industry must also step up its focus on the data privacy side of cyber risk and has a key role to play in offering loss prevention and mitigation advice to businesses about this increasingly important area of exposure," says Vanessa Maxwell, Global Head of Cyber and Financial Lines, Allianz Commercial. "The value of cyber insurance goes well beyond the payment of claims. Insurance helps companies make the business case for cyber security investment and to direct their resources towards the most effective measures."

Data breach risks are best mitigated through good cyber hygiene, including strong access controls, database segregation, backups, patching and training. Having better oversight of any cyber weaknesses in their supply chains is an area where many companies need to improve.

"Early detection and response capabilities are also key. Around two thirds of breaches are typically reported by a third party or by the attackers themselves," says Rishi Baviskar, Global Head of Cyber Risk Consulting, Allianz Commercial. "Cyber breaches that are not detected and contained early can end up being 1,000 times more expensive than those that are, the difference between a €20,000 loss turning into a €20mn one.

"AI is also becoming an essential tool in the fight against cyber-attacks, as it can quickly identify a security breach and automatically isolate systems and databases, as well as having the potential to significantly reduce the cost and life cycle of a data breach claim by automating tasks, such as forensics and notifications, potentially saving companies millions of dollars."

Hashtag: #AllianzCommercial #Cyber



The issuer is solely responsible for the content of this announcement.

About Allianz Commercial

Allianz Commercial is the center of expertise and global line of Allianz Group for insuring mid-sized businesses, large enterprises and specialist risks. Among our customers are the world's largest consumer brands, financial institutions and industry players, the global aviation and shipping industry as well as family-owned and medium enterprises which are the backbone of the economy. We also cover unique risks such as offshore wind parks, infrastructure projects or film productions. Powered by the employees, , and network of the world's #1 insurance brand, , we work together to help our customers prepare for what's ahead: They trust us to provide a wide range of traditional and risk transfer solutions, outstanding and services, as well as seamless handling. The trade name Allianz Commercial brings together the large corporate insurance business of Allianz Global Corporate & Specialty (AGCS) and the commercial insurance business of national Allianz Property & Casualty entities serving mid-sized companies. We are present in over 200 countries and territories either through our own teams or the Allianz Group network and partners. In 2023, the integrated business of Allianz Commercial generated more than €18 billion gross premium globally.

News from Asia

Tenchijin Named Finalist for IVS2025 LAUNCHPAD

Exhibiting at IVS Startup Market to Showcase Advanced Water DX Solutions TOKYO, JAPAN - Media OutReach Newswire - 30 June 2025 - Tenchijin Inc...

ESET and Canon Extends Regional Alliance to Combat Asia’s Security Challenges

SINGAPORE - Media OutReach Newswire - 30 June 2025 – ESET Asia Pte. Ltd. ("ESET"), a global leader in cybersecurity, and Canon Singapore Pte. Ltd. ("Canon") today announced the signing of a Memora...

Counterfeit and Refurbished Transducers Pose Serious Safety Risks

Merz Aesthetics® Hong Kong Launches Ultherapy® Authenticity Verification Reward Program This August Consumers Urged to Verify Ultherapy® Transducers Authenticity for Safe and Effective Treatments H...

Porsche Design Tower Bangkok and Curvistan Bangkok Host an Exclusive Preview of the "Electrifying Past. Present. Future." Exhibition

BANGKOK, THAILAND - Media OutReach Newswire - 28 April 2025 - Porsche Design Tower Bangkok showcased its commitment to innovation by hosting an exclusive evening reception with Curvistan Bangkok, ...

Hong Kong: Bridging Business Opportunities under the Belt and Road Initiative

HONG KONG SAR - Media OutReach Newswire - 30 June 2025 - As a global trade and financial centre and a key link in the Belt and Road Initiative (B&RI), Hong Kong plays a pivotal role in connect...

Octa Black: Octa broker's premium trading experience

KUALA LUMPUR, MALAYSIA - Media OutReach Newswire - 1 July 2025 - Octa, a globally regulated and trusted broker since 2011, rewards its high-value clients in Indonesia, Malaysia, and Nigeria with a...

Gaw Capital Appoints Nicholas Toh as Managing Director – Head of Data Centre Platform, Asia (Ex-China)

SINGAPORE - Media OutReach Newswire – 1 July 2025 – Gaw Capital Partners, a leading multi-asset investment management firm, is pleased to announce the appointment of Mr. Nicholas Toh as Managin...

Prime Immigration Consultancy Announces Expansion of Service Offerings to Help Clients Achieve the Singapore Dream

SINGAPORE - Media OutReach Newswire - 1 July 2025 - Prime Immigration Consultancy (PIC), a Singapore-based immigration consultancy, has announced an expansion of its services to provide more comp...

ICONSIAM in Collaboration with Shanghai Yuyuan Tourist Mart Group Brings China’s Most Iconic Lantern Festival to Thailand for the First Time

“Yuyuan Lantern Festival 2025” Lights Up Bangkok to Celebrate 50 Years of Thai–Chinese Diplomatic Ties BANGKOK, THAILAND - Media OutReach Newswire - 1 July 2025 - ICONSIAM, the global landmark al...

SIBUR to expand cooperation with clients in Bangladesh

MOSCOW, RUSSIA - Media OutReach Newswire - 1 July 2025 - SIBUR, Russia's largest producer of polymers and synthetic rubbers, sees potential to increase supplies to Bangladesh following the launch ...

Demand for Home Batteries surges as Federal Rebate Kicks In

A leading provider of energy solutions VoltX Energy has seen a 400% increase in demand for home batteries in the past three weeks as people put d...

Why Sport Remains the Safest Bet in an Uncertain World

When Rome was in crisis, its leaders did not retreat to the Senate. They went to the circus. To the chariot races. To the gladiators. Sport was no...

THE FINE LINE WITHIN HILARIOUS SIGNAGE DESIGN FAILS

It seems like design failures still occur in today’s modern branding era, despite rigorous rounds of approvals behind the scenes. One signage show...

Deputy Announces Exclusive Global Partnership with Predelo to Bring AI to Shift-Based Businesses

Deputy, the global people platform for shift-based businesses, has announced an exclusive partnership with Predelo, an AI Decision Agent-as-a-Serv...

Leftover Budget? The Last-Minute EOFY Tip to Drive Business Success in FY25/26

The countdown is on. With just days left until EOFY, now’s the time to make your remaining 2024–2025 budget work harder and smarter. After workin...

pay.com.au appoints new CEO and Managing Director

The former COO will lead the company’s next growth phase, with ex-CEO Edward Alder transitioning into the role of Managing Director AUSTRALIA, 25...

Sell by LayBy