CrowdStrike Loss Tied to Widespread Outage and Cyber Insurance

CrowdStrike's loss is a wake-up call for companies to take cyber insurance seriously. The company's widespread outage was caused by a cyberattack, highlighting the importance of having a robust cybersecurity plan in place.

The outage resulted in significant losses for CrowdStrike, including the cost of restoring services and compensating affected customers. This is a stark reminder that cyberattacks can have severe financial consequences.

CrowdStrike's experience serves as a cautionary tale for companies that underestimate the risks of cyberattacks. By investing in cybersecurity and cyber insurance, businesses can mitigate the financial impact of a cyberattack.

The company's reliance on cyber insurance to mitigate losses is a common practice among businesses.

Explore further: Cyber Insurance Losses

Cyber insurance losses related to the CrowdStrike outage will be driven by business interruption, according to Moody's.

Determining final losses for the industry will be a lengthy process due to cyber insurance policy language not being standardised. It will take time for insurers to determine which customers suffered losses from the outage, and whether those losses are covered.

Explore further: Cyber Insurance Loss Ratios

Parametrix has estimated $5.4 billion in economic losses from the event, with insured losses likely to be no more than 10%-20% of economic losses ($540 million to $1.08 billion). CyberCube's preliminary estimate of insured losses is between $400 million and $1.5 billion for the standalone cyber insurance market.

Business interruption, a primary contributor to losses from cyber incidents, will drive most of these losses. Claims will be made under "systems failure" coverage, which is becoming standard coverage within cyber insurance policies.

Several factors will limit the number and size of claims, such as waiting periods in some cyber insurance policies, self-insured retentions or the timing of the outage.

Curious to learn more? Check out: Cyber Insurance News

The CrowdStrike outage was a massive incident that affected Microsoft Windows-based systems worldwide, causing thousands of flights to be grounded. It was caused by a faulty software update released by CrowdStrike.

Delta Air Lines sued CrowdStrike, estimating the incident cost it $500 million, along with loss of future revenue and damaged reputation. The airline largely ignored CrowdStrike's offers for assistance.

CrowdStrike's third-quarter results showed a strong finish and quarter-over-quarter increase in pipeline, despite expected headwinds from the July 19 incident. The company raised its full-year revenue guidance to $3.92 billion to $3.93 billion.

Cyber insurance losses related to the outage will be driven by business interruption, according to Moody's. The agency warned that determining final losses for the industry will be a lengthy process due to cyber insurance policy language not being standardized.

The outage affected multiple industries, including airlines, healthcare, and financial services. Several factors will limit the number and size of claims, such as waiting periods in some cyber insurance policies, self-insured retentions, or the timing of the outage.

CrowdStrike has promised to release a full "root cause analysis" into the outage. The company issued a preliminary report tracing the outage to a faulty update that its existing test procedures failed to properly diagnose.

Here are some key statistics on the estimated economic and insured losses from the outage:

CrowdStrike is actively in contact with relevant congressional committees, including the U.S. House Committee on Homeland Security. The committee has requested that CrowdStrike CEO George Kurtz testify before the Subcommittee on Cybersecurity and Infrastructure Protection.