The case started with a ransomware assault on Could 21, 2022, during which a menace actor encrypted CiCi’s pc techniques and threatened to publish exfiltrated knowledge except a ransom was paid. CiCi held a cyber insurance coverage coverage issued by HSB with a $3,000,000 mixture restrict, topic to a $50,000 retention. Following the assault, CiCi notified At-Bay Insurance coverage Companies – HSB’s agent for receiving discover of claims – and, with At-Bay’s approval, retained a regulation agency and incident response agency, Arete Advisors, to conduct a breach investigation, handle the response, and negotiate with the menace actor. The unique ransom demand of $2,000,000 was negotiated right down to $400,000. CiCi finally alleged complete losses exceeding $1,200,000 because of the cyber occasion.
