Loss scenarios from internal cyber threats

Companies must remain vigilant about how their business would be affected if they were impacted by a cyber incident.

This list of loss scenarios from internal Cyber threats explains the potential impact on a client’s business and describes how Chubb’s Incident Response Platform helped contain the Cyber threat:

Scenario: Employee error

A Recruiter for a healthcare organisation accidentally attached the wrong file when sending an email to four job applicants. The file included HR demographic data consisting of 43,000 former employee names, addresses, and national ID numbers.

The insured telephoned the Chubb Incident Response Hotline for assistance and an Incident Response Manager was assigned. Chubb brought in Legal counsel to manage regulatory implications.

Potential impact

Privacy liability - mismanagement of personal and/or corporate confidential information, violation of company privacy policy:

– Defence expense arising from regulatory investigation: $100,000

– Defence and settlement costs for claims employees that had identity stolen: $250,000

Incident response expenses:

– Incident response manager fees: $7,000

– Notification of affected individuals: $5,000

– Identity theft monitoring services for affected individuals: $28,000

– Legal consultation fees: $25,000

Total cost: $415,000

Takeaways

It is important to understand that cyber is not only related to technological incidents. As innocent as it may seem, human error can be very costly, and it occurs more frequently than expected.

Many of the claims Chubb see stem from very simple employee errors.

Scenario: Disparagement via email

An employee for a consultancy company sent an internal email containing negative comments regarding a service provider.

The email was forwarded to others within the organisation and eventually was sent externally.

The email was seen by the service provider and a defamation lawsuit was brought against the consultancy company for harming the service provider’s reputation.

Potential impact

Media liability - third party claims arising from the Insured’s internet media activities. Wrongful Acts include product defamation, disparagement, trade libel, false light, plagiarism, and more:

– Defence and settlement costs for claims from service provider, $25,000

Incident response expenses:

– Crisis communication services: $10,000

– Public relations expert fees to minimise reputational impact: $8,000

– Incident response manager fees: $3,000

Total cost: $46,000

Takeaways

Due to the sensitivity of such a claim and the potential damage to a client’s reputation, it’s important for companies act quickly to mitigate any potential loss or damage.

By ringing the Chubb Incident Response Hotline we can ensure the correct specialists such as PR consultants are appointed to work with the client and communicate effectively with the service provider to resolve issues and bring the matter to a conclusion.