Cyber attacks on payment systems – counting the cost
30 November 2023
Last month, Lloyd’s published its systemic risk scenario detailing the potential global economic impact of a hypothetical cyber-attack on major financial services payment systems.
The model set out the three ways in which an attack can impact businesses:
- data breach;
- compromising data accuracy and validity; and
- prevention of access.
Detailed in the scenario, through the use of code attackers are able to infiltrate networks, providing access to perform a major breach. As the discovery and repair of a breach can be a lengthy task, throughout this period the attackers are able to divert funds.
The model highlights that the United States of America, China and Japan are the countries likely to experience the highest economic loss. Loss of confidence in the institution and an increase in costs to tighten regulations and increase resilience were also highlighted in the scenario.
In building the scenario, Lloyd’s and the Cambridge Centre for Risk Studies considered previous historic events such as:
- 2017 - Wannacry: A ransomware attack impacting Windows systems by encrypting contents and demanding a payment to decrypt. It was reported that the attack impacted 99 countries, with the NHS and companies such as Telefónica in Spain, Renault in France and FedEx in the USA being affected.
- 2017 - NotPetya: A malicious data encryption tool hidden in legitimate software that spread rapidly through trusted networks, therefore bypassing the processes in place to prevent ransomware. The attack was destructive, with the malware not being designed to be decrypted. An assessment by the National Cyber Security Centre found that the Russian military was ‘almost certainly responsible’.
- 2022 - Albania DDoS attack: A destructive cyber-attack against the Albanian government that disrupted government websites and public services. The attack involved the deployment of ransomware followed by wiper malware. Microsoft stated with ‘high confidence’ that the attack was carried out by actors sponsored by the Iranian government.
For further considerations for insurers in regards to cyber-attacks, please see our CyberCube’s Global Threat Outlook: The evolving threat of cyber operations article in The Word’s September edition.
Key contact
Tim Johnson
Partner
tim.johnson@brownejacobson.com
+44 (0)115 976 6557
Contact Tim
Related expertise
You may be interested in...
28 October 2024
Legal Update
Updates to the UK’s Arbitration Bill
28 October 2024
Legal Update
Ozempic: The rising costs and coverage issues of weight loss medication
28 October 2024
Legal Update
ICAEW: Changes to PII requirements
28 October 2024
Legal Update
Contractor insolvency: Peabody Trust v NHBC
17 October 2024
Legal Update
By a narrow 2 to 1 majority, the Court of Appeal finds in favour of insurers in the construction of an exclusion clause in a W&I policy
23 September 2024
Legal Update
LMA binders’ consultation
23 September 2024
Legal Update
Smooth sailing ahead: The LMA's new Open Form Default Clause
23 September 2024
Legal Update
PFAS: The issue that won’t go away
23 September 2024
Legal Update
Oklahoma earthquake: Racial discrimination in adjudication
23 September 2024
Legal Update
Vicarious liability for kinship foster carer abuse: Implications for local authority insurers
23 September 2024
Legal Update
Latest short-term insurance trends
29 August 2024
Legal Update - The Word
The Word, August 2024
29 July 2024
Legal Update
Words matter: Another case on the importance of accurate drafting
29 July 2024
Legal Update
London Fire Brigade to stop attending for automatic fire alarms: Implications for insurers
29 July 2024
Legal Update
Navigating Oil Price Cap legislation: LMA issues revised Cargo and Hull wordings
29 July 2024
Legal Update
It’s not cricket: Insurers change their mind about jurisdiction
27 June 2024
Legal Update
Multi-occupancy building insurance: Latest tribunal decision
27 June 2024
Legal Update - The Word
The Word, June 2024
28 May 2024
Legal Update - Consumer Duty
Updated UK Consumer Wordings Guidance: Browne Jacobson collaborates with the LMA
28 May 2024
Legal Update - Consumer Duty
From products to protection: The rise of embedded insurance
28 May 2024
Legal Update
The European Accessibility Act: Inclusive products and services
28 May 2024
Legal Update
Final FCA anti-greenwashing rule guidance published
28 May 2024
Legal Update - The Word
The Word, May 2024
24 April 2024
Legal Update
The Baltimore bridge collapse: One of the biggest losses in maritime insurance history?
24 April 2024
Legal Update
The space data revolution
24 April 2024
Legal Update
New guidance on supporting autistic customers for the insurance industry
24 April 2024
Legal Update
Chubb ordered to indemnify SXSW for Covid cancellation
28 March 2024
Legal Update - The Word
The Word, March 2024
05 March 2024
Legal Update
Commercial Court considers requests for stay or anti-suit injunction where two competing reinsurance wordings
01 March 2024
Legal Update
Insurers prevail once more in construction of an exclusion clause in W&I policy
27 February 2024
Legal Update
Parametric flood policies - Insurers no longer in uncharted waters?
27 February 2024
Legal Update
LockBit unlocked: International taskforce takes down major cyber criminal organisation
27 February 2024
Legal Update - Consumer Duty
80% of GAP market pause sales amid Consumer Duty concerns
27 February 2024
Legal Update
FCA writes to MPs over car insurance premiums. What do increases mean for fraud?
27 February 2024
Legal Update
Biodiversity Net Gain: A new landscape for restoration clauses
27 February 2024
Legal Update
The regulators’ pet project
27 February 2024
Legal Update
Welsh Government inks new regulations for Acupuncture, Body piercing, Electrolysis and Tattooing
27 February 2024
Legal Update
Insurance and the escalating situation in Suez Canal
27 February 2024
Legal Update
Update: Further debates on the Automated Vehicles Bill in the House of Lords this month
27 February 2024