And that's the last time anyone buys cyber insurance from Zurich. What's the point of cyber insurance that doesn't cover ransom wear? Just a useless waste of money.
They aren't not covering ransomware. I suspect future buyers are going to re-evaluate if they really don't need coverage against being casualties of nation-state attacks though.
Property insurance industry works with the security community to develop and enforce standards for security operations, safes, locks, alarm systems, etc. that reduce theft, and employs investigators to recover stolen high-value goods.
Auto insurance industry works with the automakers and regulators to develop and enforce standards for crash safety, airbags, crumple zones, collision avoidance systems, etc. and employs litigators to recover damages from the at-fault party.
Insurance companies aren't just professional gamblers. They are risk managers. You pay them to deal with the nitty gritty of risk mitigation in whatever domain because it's not your speciality.
How are you going to manage the risk of enemy damage in war? You're going to wield more violence than the threat, and seize its assets to make yourself whole. Instead of settlement or recovery, we call it reparations.
There are insurance companies that insure war risks, e.g. for facilities in unstable countries, and those companies are not in a position to seize reparations.
