Microsoft 365 outage raises cyber-insurance questions, not an attack
Original title: Hospitals, airlines and governments hit by Microsoft outage as employee risk warnings mount
Brokers say many policies need a security failure, and this outage has already run past a typical eight-hour waiting period.
Sheriff’s offices, courts, state agencies and hospitals lost email as a Microsoft 365 failure ran past 12 hours. Microsoft has said the outage was not an attack. Insurance News quotes brokers on whether non-malicious system failure or contingent business interruption would respond, noting waiting periods often of eight hours or more and lower sublimits. Joe Hershewe of Bellrock Advisory said most affected parties are unlikely to meet a breach threshold. Ed Ventham of Assured said it is too early to judge claims. DataBreaches expects more reporting on insurance consequences.
Unconfirmed: Claim impact is unconfirmed; brokers say it is too early to say what policies will pay.
- The failure ran past 12 hours and past a typical eight-hour waiting period.
- For many US businesses it began Thursday afternoon, so lost working hours may be lower.
- Policies differ on whether a software-as-a-service provider is a covered dependency.
- The item is commentary from an insurance-industry post, not a new incident report.
- Vendors
- Microsoft
- Products
- Microsoft 365
- Organizations
- Bellrock AdvisoryAssured
- Countries
- United States
From the original article
3 min read at databreaches.netSheriff’s offices, courts, state agencies and hospitals lost email as the Microsoft 365 failure ran past 12 hours. The bigger risk for insurers may be what staff did to keep working. An insurance perspective on the outage from Insurance News.
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.