Monthly Archives: March 2021

Business Risk, Emerging Risks, Health & Safety, Insurers and the Economy, Risk Management

“Lightning Round” Highlights Technologies Reopening the Economy

Leave a comment

Public discussion about re-opening the economy after COVID-19 has mostly revolved around the safety, efficacy, and availability of various vaccines. But in the longer term, other measures and new technologies will be key to getting back to normal and being prepared for future public health emergencies.

Last week’s Lightning Round V: Reopening America in the Post-Pandemic Scenario – a collaboration between Triple-I’s Resilience Accelerator, ResilientH20 Partners, and The Cannon – featured three technologies that promise to help facilitate the recovery.

Workplace workflow

Tomer Mann, executive vice president of business development for 22 Miles, discussed his company’s “digital experience platform,” which incorporates temperature-scanning technology, touchless kiosks, virtual concierge, and other applications to provide social distance among customers and employees and early warning of possible infection in business settings.   

“In March, when we were seeing a lot of the temperature-scanning solutions coming out of China, we realized we could leverage our software to pivot and create a more secure solution, avoiding some of the sensors that are coming out of China that are blacklisted in the trade market and avoiding some of the data breach implications,” Mann said.

22 Miles’ “workplace workflow” starts at a building’s lobby, using facemask and temperature detection and including badge integration and access control for employees and guests. For companies using shared workspaces, the system tracks what spaces are being used to facilitate sanitization between uses. To minimize physical contact while maximizing interactivity, the system’s components can be activated using voice, gesture, or mobile device.

In addition to facilitating safe, hygienic use of these spaces, the system captures large amounts of data that can provide warnings of possible infections and inform modifications to the workflow.

Scrubbing the air

Santiago Mendoza, senior vice president with Integrated Viral Protection, spoke about his company’s indoor air protection system, which has been shown to capture and destroy coronavirus at a 99-plus percentage rate. The system has shown similar results when tested with anthrax spores and other airborne pathogens.

Heating, ventilation, and air conditioning (HVAC) systems are “super spreaders” of coronavirus and other pathogens, Mendoza said, adding that most filter systems only catch and don’t kill them. 

“Our system heats up to almost 400 degrees Fahrenheit and destroys the pathogens,” he said.

The IVP system is available for commercial and residential uses and has been installed in hospitality venues, health facilities, and schools across the United States, Mendoza said. It comes in multiple sizes, including a personal unit for travelers to use in hotel rooms and other closed spaces.

Early warning in water

Jennings Heussner, business development manager for BioBot Analytics, a wastewater epidemiology company, explained how BioBot went from testing for opioids to tracking coronavirus.

“We analyze wastewater coming into treatment plants for human health markers,” Heussner said. The company originally was focused on the opioid epidemic, helping communities better understand the nature of their local opioid problems to better inform their public health response.

When the pandemic hit, BioBot expanded its focus and became the first company in the United States to identify the presence of the virus in wastewater.

Leveraging existing wastewater sampling processes, BioBot analyzes the sample and reports back within one business day after receiving it, providing a quick, inexpensive, comprehensive early warning system.

Ready and resilient

Such technologies will be essential parts of building a pandemic-ready and resilient society. Anticipating and addressing outbreaks early can help alleviate health-related and business-interruption concerns and head off insurance claims.

Just as the insurance industry played a vital role in improving vehicle safety, infrastructure, building codes, and more, insurers and risk managers – partnering with policymakers, businesses, homeowners, and others – will help determine which of these emerging solutions will endure.

Careers and Employment, Disaster Resilience, Insurance Industry, Risk Management

Insurance Careers Corner: Q&A with Susan Holliday, Senior Advisor, International Finance Corporation and Triple-I Non-Resident Scholar

Leave a comment

By Marielle Rodriguez, Social Media and Brand Design Coordinator, Triple-I

Triple-I’s “Insurance Careers Corner” series was created to highlight trailblazers in insurance and to spread awareness of the career opportunities within the industry.

Susan Holliday

March is Women’s History Month, and this month we interviewed Susan Holliday, a Senior Advisor at the International Finance Corporation (IFC) and the World Bank where she focuses on insurtech and insurance for SMEs and women. She is also a non-resident scholar at the Triple-I. Holliday sat down with us to discuss developing trends in insurtech, how technology and innovation can help close the protection gap, and the importance of collaboration in tackling climate risk.

Tell us about your current role at the International Finance Corporation (IFC). How did you fall into a career as an advisor and an investor in insurance?

IFC is the private sector arm of the World Bank. We focus on making investments and advisory work in emerging markets in sectors ranging from infrastructure to banking and insurance and healthcare. I’ve had a 33-year career in the financial services industry, particularly focusing on insurance and more recently fintech. I joined IFC to work on insurance and fintech. I’m currently working within different departments at IFC and at the World Bank and building a board portfolio. I’m also a non-resident scholar for the Triple-I. 

A lot of your work is focused on insurance for women and SMEs. What do you hope to achieve in investing in insurance for women?

Before I joined the IFC in 2015, the company completed research in conjunction with Accenture and AXA about the insurance market for  women. The study found that the insurance market for women could be USD 1.3 trillion globally by 2030 and half of that would be in emerging markets. The research also indicated that women have a better understanding of risk, are very open to insurance, and can be loyal customers and excellent employees in the industry.

After the She for Shield report was published, IFC started advising insurance companies in emerging markets on how to successfully serve women. IFC already had a program called ‘Banking on Women,’ which provided financing for banks to lend to women and women-led SMEs. Whenever we make investments in emerging markets, we are interested in taking an angle that better supports women. 

Can you elaborate on the protection gap between women and men and between people with different financial backgrounds?

If you think about it, the insurance industry has a great history and is hundreds of years old. A lot of products were developed a long time ago when society and family structures were very different from what they’re like now. For example, today there are lots of single women and single parents, and most women work, which was not the case when the products were developed. We also have gig economy workers. The default option has always been to continue to offer products that have been offered for 50-100 years, but they do not necessarily meet the needs of today’s customers, whether they are women or men. 

This is the reason why I like technology and innovation. To close the protection gap, we need to protect the things that people care about and that need to be protected. There has been a mismatch between traditional products and the actual risks people are facing. 

There’s been a report by the Chartered Insurance Institute called “Insuring Women’s Futures” which looked at different times over a lifetime of one person, and it shows where a woman can be treated differently than a man. For example, having time off for maternity leave, having less pension, and living longer. It pointed out all these things that could accumulate and leave a woman being in a much worse position [than men]. Families are no longer a guy who’s working, a stay-at-home woman, and kids. Insurance needs to catch up to reality, and this not only applies to women but all underserved communities. This will not only be a challenge for the industry but also an opportunity to grow. 

As an advisor to insurtech start-ups, what impact do you see these companies making? Are there any recent trends or developments in insurtech and fintech that excite you?

I think insurtech, digital, and innovation are critical. There is no insurance without insurtech. We’re never going to close the protection gap unless we use and utilize new technologies to do it. 

One of the trends is bite-size insurance on demand. For example, instead of buying an insurance policy for a year, you would be able to turn it on and off, which is relevant to gig economy workers, and is popular in developing countries. Some people would rather access [insurance] when they need it.

Another trend is using alternative data to close the protection gap and get insurance to more people. If we just rely on the old sources of data, a lot of people get excluded from the market or get priced out. It may have built-in biases, which were not intended, but may disadvantage women or certain racial groups. The combination of alternative data sources and artificial intelligence is exciting. 

You’re part of the leadership team for Triple-I’s Resilience Accelerator. Tell us about your work with the initiative and why you chose to join the team.

An area where the protection gap is big in the U.S. is in natural disasters and climate-related risks. We’ve seen so many things happen in recent years, such as Hurricane Harvey, and most recently, the very cold snowstorms in Texas and the wildfires on the U.S. West Coast. I think this is an extremely important area. It’s something that impacts everybody, regardless of gender, income level, or political identity. 

I particularly like Accelerator, because I think insurance has a bigger role to play in prevention and mitigation, not just about compensation, and I like the approach of bringing different stakeholders together.  

2020 was a historic year for natural catastrophe losses. What is the insurance industry doing to mitigate future losses and to prepare for a world impacted by climate change? What are the industry’s biggest challenges in creating resilience?

First and foremost, making insurance more available and more affordable. For example, there is parametric, index-based insurance, which can be provided at a micro-level and is used in some developing countries.

We need to get involved in longer-term thinking about how we can be more resilient against these risks in the first place. We must think about building towns, cities, and farmland in a way that they will be more resilient against weather losses. It has to do with planning, infrastructure, and it may have to do with changing certain industries.

I would like to see the insurance industry at the table in these discussions with regulators, local and state governments, and with private sectors so that all sides are working together. The industry needs to have a voice and be taken seriously. We need to think about how different parts of society can share the risk of climate-related losses.

Careers and Employment, Catastrophes, Insurance Industry, Risk Management

Women’s History Month Karen Clark: A Model of Success

Leave a comment

By Loretta Worters, Vice President, Media Relations, Triple-I

Like many people, Karen Clark’s career was influenced by circumstances and serendipity rather than advanced planning.  In graduate school she developed a love of building computer models, leading to her first job in the research department of Commercial Union Assurance. 

“One of my first assignments was to figure out if the insurer had too much coastal exposure because they had been growing along the coastline,” said Clark.  “I started to research hurricanes and how I could potentially build a model to estimate hurricane losses.” 

That research ultimately led Clark to write her seminal paper “A Formal Approach to Catastrophe Risk Assessment and Management,” published in the Casualty Actuarial Society Proceedings, in which she argued for probabilistic models rather than the subjective rules of thumb then used in underwriting. 

“Catastrophe modeling was a game-changer because it introduced a whole new way of understanding and managing risk,” Clark explained.  “We don’t just look at worse-case scenarios, but we develop a probability distribution of potential outcomes.  What are the chances of a $1 billion versus a $10 billion hurricane loss?  You need probabilities so you can evaluate how likely you are to have a solvency-impairing event and how much reinsurance you want to purchase and for pricing the product.  You also need to know what the costs and benefits are of different mitigation strategies.  That’s what was missing prior to the catastrophe models.” 

Being Taken Seriously as a Woman in the Insurance Industry

When Clark first started out, catastrophe reinsurance was primarily written out of Lloyd’s of London.  “Lloyd’s was 100% male,” she laughed.  “I gave my first presentation in the Lloyd’s Library to about 100 male underwriters.  Not only was I a woman, but I was an American woman, and I was seven months pregnant,” she said.  “Along with that, I was carting this portable computer. Many underwriters had never seen a portable computer, much less used one. 

“After my presentation, there was silence in the room, and little interest, but that didn’t dissuade me.  I was determined to find those innovators and forward thinkers and I did find a few in Lloyd’s and in the U.S., who helped me to develop AIR’s first product, CATMAP.”

Clark said it is important early on to find those forward thinkers who believe in what you’re doing and are willing to make a commitment.  She advised women not to take no for an answer and to be good communicators.  “You always have to ask for what you want.  The worse that can happen is you get a no.” 

Clark hasn’t looked back since.  As founder of the first catastrophe modeling company, Applied Insurance Research, later AIR Worldwide, she became an internationally recognized expert in the new field of catastrophe risk modeling, revolutionizing the way insurers, reinsurers and financial institutions manage their catastrophe risk. 

Clark declined many offers to sell her company over the years, but eventually decided to sell AIR to Insurance Services Office (ISO).  Several years later, she co-founded  Karen Clark & Company (KCC) with her business partner, Vivek Basrur, never intending to develop catastrophe models again.  “But as my partner likes to say, life is what happens when you have other plans.”

Reinventing an industry

“Through numerous consulting engagements with global (re)insurers we discovered the models were not meeting all the needs of the senior level decisions makers.  We started hearing several consistent themes and eventually developed what we called the CEO Wish List”, said Clark.

That CEO Wish List informed the KCC vision for a new generation of catastrophe models—models that are more accurate, fully transparent, and provide decision makers with additional risk metrics and insight into large loss potential.  “We didn’t change the fundamental structure of the models”, says Clark, “but rather how the models are  delivered to (re)insurers and how they can be leveraged in new ways.”

Clark said that KCC is doing a few things differently than other modelers and one of them is their scientific approach.  “Rather than extrapolating from historical data, we have implemented advanced physical modeling techniques for the more frequent events, such as severe convective storms, winter storms, and extratropical cyclones.  This enables our models to capture all weather-related claims and not just those defined as catastrophes.  Our internal systems automatically ingest over 30 gigabytes of data a day from all the satellites, radar stations and global models so our clients have high resolution hazard footprints every morning for monitoring and managing daily claims activity. 

“Interestingly, reinventing the catastrophe modeling industry was just as challenging as inventing it”, says Clark, “because most people thought it was impossible.”  “We again had to find those industry leaders and early adopters who believed in our vision and then worked with us to make it a reality.”

Clark said she’s very fortunate she discovered her passion at a young age when she first started her career.  I just love what I do, and until I can come up with something else that I could enjoy doing daily as much as I enjoy KCC, I’ll be right here.”

Cross-posted from the Triple-I Resilience Accelerator blog

Catastrophes, Insurance Industry

Triple-I CEO: 2020 Proved Insurers Can Lead Through Disruption

Leave a comment
Sean Kevelighan


The U.S.’s auto, home, and business insurers have more than met the challenges raised by COVID-19 over the past year, according to Sean Kevelighan, CEO, Insurance Information Institute (Triple-I).

“2020 proved how this industry can lead through disruption. We can adapt. We can innovate. We can keep our promises and pay claims—even during a global pandemic,” Kevelighan said, in remarks today to the Reinsurance Association of America’s (RAA) virtual 2021 Catastrophe Risk Management conference.

The net income after taxes for U.S. auto, home, and business insurers cumulatively dropped to $35 billion in the first nine months of 2020, a 25-plus percent decrease from where the insurers’ net income after taxes stood after the first nine months of 2019, Kevelighan said. The deterioration was attributable in part to the severity of 2020’s hurricanes, wildfires, and civil unrest.

Despite these events, the Triple-I’s CEO noted how insurers provided an estimated $14 billion in premium relief to locked-down drivers, donated nearly $300 million to charitable causes, and largely retained its national workforce of 2.8 million Americans as premiums grew modestly.

“If you look at net premiums written growth, we were actually at the 10-year average last year,” Kevelighan continued, reporting how auto, home, and business insurers realized three percent net premiums written growth year-over-year when comparing the first nine months of 2020 to the same timeframe in 2019. Net premiums written are premiums written after reinsurance transactions.

COVID-19’s arrival in the U.S. also prompted the Triple-I’s launch last year of its Future of American Insurance & Reinsurance (FAIR) campaign, he continued, as policymakers, such as those in the U.S. House of Representatives, sought clarity on what property damages were, and were not, covered under standard business income (interruption) insurance policies.

“The FAIR campaign was meant to be an aggressive way to inform the discussion,” Kevelighan stated, “Our customers needed financial support and we knew the federal government was the only entity who could provide it.”

In assessing 2021’s key issues, Kevelighan said he thought telematics and social inflation would take on greater import among insurers and their policyholders. “Telematics is one way our industry can drive safety on our roads,” the Triple-I’s CEO said, referring to the devices drivers can place voluntarily in their vehicles to reduce the cost of auto insurance and to encourage safe driving habits. “Social inflation is getting worse. These massive litigation lawsuits are really putting a strain on the cost of liability insurance,” Kevelighan stated.

Following his remarks, Kevelighan participated in a live question and answer session moderated by Frank Nutter, president, RAA. Katrin Zitzelsberger, senior epidemiologist, Munich Re, and Damon Vocke, partner, Duane Morris, joined them.

Auto Insurance

U.S. Drivers Spent $13 Billion in One Year to Protect Against Uninsured and Underinsured Drivers: IRC Report

Leave a comment

One in eight drivers on U.S. roads was without auto insurance in 2019, according to a report released today by the Insurance Research Council (IRC).

At-fault drivers who don’t comply with state insurance requirements raise insurance costs for everyone else. Insured drivers paid more than $13 billion in 2016 (about $78 per insured vehicle) for protection against at-fault drivers who have inadequate coverage for medical costs and property damage they inflict on others.

“Keeping auto insurance affordable is more difficult when a significant number of drivers refuse to carry their fair share of the costs,” said David Corum, vice president of the IRC.

While countrywide the uninsured motorist rate was 12.6 percent in 2019, these rates varied substantially across states, ranging from 3.1 percent in New Jersey to 29.4 percent in Mississippi.

Although the uninsured motorist rate increased only 1.2 percentage points nationwide from 2015-2019, several states experienced more significant increases, including Washington (6.9 percentage points), Rhode Island (6.8 percentage points) and Mississippi (6.4 percentage points). Other states experienced decreases in uninsured motorist rates, including Michigan (10.1 percentage points) and Delaware (2.9 percentage points).

The IRC report, Uninsured Motorists, 2021 Edition, examines data collected from 11 insurers representing 60 percent of the private passenger auto insurance market in 2019. For more information on the study’s methodology and findings, contact David Corum, at (484) 831-9046, or by e-mail at IRC@TheInstitutes.org. For more information about the report, visit the IRC’s Web site at www.insurance-research.org.

Corporate Social Responsibility, Insurance Industry

Insurance Gives Back: March 2021 Update

Leave a comment

When disaster strikes the insurance industry is a financial first responder. Millions of dollars are on the way to policyholders to cover claims related to the severe winter weather that pummeled the United States in February. But the industry is also staffed by individuals who care deeply about their communities and contribute above and beyond what their jobs require.

Below are just a few examples of donations companies and organizations have made to help their neighbors in need.

  • The American Family Insurance Dreams Foundation made a $10,000 donation to the American Red Cross on behalf of the enterprise to aid disaster relief in Texas.

  • Several insurers including Liberty Mutual and Northwestern Mutual are part of the American Red Cross Disaster Responder Program. The Red Cross works with government and community partners to coordinate food and water distribution to where it is most needed.

  • The Hanover Insurance Group, Inc. raised $1.5 million for United Way and hundreds of other nonprofit organizations across the country through an employee giving campaign. The contribution represents the largest donation the company’s charitable foundation and its employees have ever made through the annual giving program.  

  • The Insurance Industry Charitable Foundation’s (IICF) Southeast division has raised more than $560,000 to support 21 nonprofit beneficiaries who are facing challenging times due to the COVID-19 pandemic and the recent winter storms. The IICF is also raising funds to help feed children and families that are facing hunger because of the pandemic.

  • New York Life donated $100,000 to Feeding Texas in response to the winter storm to support immediate food shortage needs in the most vulnerable communities in the state. The New York Life Foundation will match donations made by employees and agents up to an additional $100,000 to both Feeding Texas and the New York Life Emergency Assistance Fund, which provides financial assistance to employees and agents impacted by catastrophic events.

  • Texas Mutual Insurance Company donated $100,000 to six organizations on the frontlines providing Texans with basic needs like food, water and shelter. The Coalition for the Homeless in Houston was one of the recipients.

  • The USAA Foundation, Inc. has announced a $350,000 commitment to help Texas residents recover from February’s storm.
Careers and Employment, Insurance Industry

Mentoring: Insurance for Success. Spotlight on Cathy Weatherford

Leave a comment

To commemorate Women’s History Month, Scott Holeman, Triple-I’s Media Relations Director, interviewed Cathy Weatherford, the first woman to serve as Insurance Commissioner of Oklahoma.

Like most insurance and financial service professionals, Cathy Weatherford didn’t pick her career. It picked her. Taking advice from her father who served as a state legislator in Oklahoma, Cathy applied for state government jobs where there were a variety of opportunities with health and retirement benefits. She landed at the Oklahoma Insurance Department.

For 16 years, she climbed the department’s ladder while honing her skills in public policy and insurance regulation. She also learned the art of politics while serving as a top aide on a gubernatorial campaign. Soon after, Weatherford landed the job of Oklahoma Insurance Commissioner, the first woman to serve in that role. “That was a ceiling-smashing moment for me,” said Weatherford. “I suddenly became acutely aware of the torch I was carrying for my daughters and for younger women in my state.”

Many of her direct reports at the department were young women. The terms “mentor” and “sponsor” were not common in state government or even the private sector, but Weatherford says she used her role to help younger women and men enhance their professional growth by sharing her unique perspectives, honest feedback and earnest advice.

“Mentoring is about sharing your experiences, suggestions and knowledge,” says Weatherford. “Hold back on trying to push your personal opinions because mentees need to make their own decisions in order to gain confidence and strength. Be a mentor—not a mother. Stay out of relationship and marital advice. Support them in difficult professional moments and celebrate their professional accomplishments.”

After leaving the Oklahoma Insurance Department, Weatherford worked in private industry before being named CEO of the National Association of Insurance Commissioners, where she led efforts to modernize insurance regulation. “We moved regulation into a highly efficient and productive process through technology and innovative software solutions,” said Weatherford. “We developed educational credentials for regulators to further professionalize regulatory careers, and we engaged in and play a major role in the international regulatory arena. Most importantly, we proved that state insurance regulation works and does not need federal intervention.”

Her next stop was to rebrand and rejuvenate the National Association for Variable Annuities/NAVA after the financial crisis. As president and CEO of Insured Retirement Solutions (IRI), she moved the association from Reston, VA to Washington, D.C., expanded the role of the association and made it more consumer-facing. She retired from that job in 2019 after 10 years.

In the last 13 years, Weatherford has mentored six young women. One of them is Molly Meek, a Kansas City, MO-based account executive for an insurance brokerage firm. Meek almost left the industry after her first job wasn’t providing the experience she’d hoped. Weatherford encouraged her to try again before switching career paths. “It’s so amazing having Cathy as a mentor,” says Meek. “Having someone I can call who can help explain large organizations and their politics, as well as helping me focus my efforts, is invaluable. That’s not something college prepares you for.”

Weatherford is the author of “Women and Wealth: Inspiring Stories from Real Women on the Path to Financial Success.”

Careers and Employment, Corporate Social Responsibility, Insurance Industry

Change Through Action: Diversity, Equity, and Inclusion in Insurance

Leave a comment

By Kris Maccini, Social Media Director, Triple-I

Dr. Leroy Nunery II

While the insurance industry acknowledges the importance of Diversity, Equity, and Inclusion (DEI), has it become part of the core values and culture? The short answer: there has been progress, but more action is needed. Triple-I met with Dr. Leroy Nunery II, author of The Journey of African-American Insurance Professionals and Triple-I non-resident scholar, to discuss how the industry has advanced in DEI since his 2018 study.

Nunery describes Diversity, Equity, and Inclusion as interoperable, noting that each is often defined separately but can’t stand alone. “Diversity is the practice of considering differences from whatever the norm is at a company. Equity is about access to opportunities that people might not have. Inclusion is bringing people together at the same table and the concern that they have for each other,” he explains.

According to S&P Global research, the number of Black professionals in the insurance industry increased to 12.4 percent of the workforce from 9 percent in the last 10 years, with the number of Asians and people in the Other category increasing to 6.2 percent and 2.7 percent, respectively. While the numbers are rising, the pace of change is lagging.

One of the primary challenges to DEI within insurance is the barrier to entry. Nunery explains, “Insurance is largely nepotistic and driven by family connection. It’s challenging to succeed without that group connection or network.” He believes that people of color can shift these numbers and take advantage of that momentum. “We can be exclusive at times. We say, ‘We’re all in,’ but we do everything we can so only a small group can get in. We need to do a better job of transferring knowledge,” he says.

Companies are realizing that commitment to DEI is more than hiring more people of color. There are markets to develop, business alliances to form, and investments in training and advocacy. Nunery is working with a client on a six-month job shadowing program that partners people of color with senior executives – granting C-suite exposure and access to meetings that were previously out of reach. “It’s important to coach up talent to perform at a greater level,” Nunery says of these programs. “It’s a tightrope to walk, but I tell people not to worry about failure. Worry about how successful you’re going to be.”

Camaraderie and mentorship can only go so far. A September 2020 survey by Business Insurance showed that 63 percent of respondents believe that the CEO bears the greatest responsibility in making DEI work. Nunery agrees and adds that the CEO not only needs to say that DEI is important but also puts it into action.

“When you ask companies to prove DEI, they come up short,” Nunery says. “Managers are not evaluated for it. There are no key performance indicators. Boards ask about it but don’t make it mandatory. To make DEI successful, let’s be more honest with our exchanges.”

Business Risk, Cyber Risk

Businesses are urged to take steps immediately to mitigate massive data breach tied to Chinese hackers

Leave a comment

The alarm about the ongoing hack of Microsoft Exchange Server, which began as early as January, appears quite justified. Microsoft believes a state-sponsored Chinese group called Hafnium orchestrated the attack that exploited flaws in Exchange software to gain access to email accounts and install unauthorized software, gaining full control of affected systems.

Hafnium primarily targets entities in the United States across a number of industry sectors, including infectious disease researchers, law firms, higher education institutions, defense contractors, policy think tanks and NGOs, according to Microsoft.

In a tweet, the United States Cybersecurity and Infrastructure Security Agency (CISA) urged “ALL organizations” across “ALL sectors” to follow its guidance to address the email software’s vulnerabilities.

The number of U.S.-based organizations affected is estimated to be at least 30,000, while worldwide that number is close to 100,000. The vulnerability can be exploited to compromise networks, steal information, encrypt data for ransom, or even execute a destructive attack. CISA advises business leaders at all organizations to ask IT personnel to immediately address this incident or get third-party IT support.

A Hafnium attack should trigger any cyber insurance an organization has in place, according to Lockton, an insurance broker.  Lockton recommends that organizations contact their insurer only if they discover that the vulnerabilities being exploited are present in the system. If an attack is underway, it should be reported to cyber insurers immediately.