Cyber Insurance Rates Rose for Law and Healthcare Firms
Increased claim activity and high-value ransomware payouts are hardening market conditions for specific professional sectors.
Updated on Sept. 30, 2026 in Cybersecurity
Live Poll
Are you seeing your insurance costs increase due to rising cyber threats in your industry?
Cyber insurance rates have increased for healthcare and law firms due to a rise in ransomware claims and costly data exfiltration incidents. One law firm recently reported a $20 million ransom payment, highlighting the severity of current threats.
Why it matters
The insurance market is hardening as healthcare and legal sectors face a surge in liability and business interruption claims. Increased class action litigation is forcing carriers to re-evaluate risk models, even when ransoms remain unpaid.
A recent $20 million ransom payout underscores the financial escalation in legal sector incidents. While healthcare and law firms face hardening rates, underwriters currently maintain flexibility regarding baseline security controls for smaller businesses.
The players
Florence Levy
An expert analyst who identified the challenging market segments in the cyber insurance industry.
The details
Threat actors are increasingly shifting their tactics from full network encryption to data exfiltration—the unauthorized transfer of data from a computer—because it is a more efficient method for extortion. Criminals specifically target law firms because their business model relies heavily on client confidentiality, making the threat of public disclosure particularly coercive for these entities.
Timeline
2023: SME business interruption and liability claims were recorded.
2024: SME business interruption and liability claims were recorded.
September 23, 2026: Florence Levy identified these areas as the most challenging segments of the cyber market.
The Tech Race
This hardening market follows the shift in threat actor preference from full network encryption to data exfiltration. The insurance sector is now locked in a reactive race to model these risks against evolving criminal methodology.
Law and healthcare organizations should anticipate higher premiums and more rigorous underwriting reviews for their cyber policies. Smaller businesses currently retain some flexibility in security controls, but this is subject to change as the market adjusts to the current claim environment.
The takeaway
The rise in high-value payouts like the $20 million ransom confirms that professional services are currently the primary target for attackers. Firms should watch for updated underwriting requirements as insurers adjust their risk tolerance in response to these ongoing claims.
Further reading
For more on the shifting threat landscape, visit Cybersecurity.
Source note: This article includes information reported by Theinsurer.
Live Poll
Are you seeing your insurance costs increase due to rising cyber threats in your industry?
