Manufacturer pays ransom after data backups compromised
An industrial machinery manufacturer with nine U.S. locations received a ransom note from an advanced ransomware group. They contacted the Coalition Claims Hotline and engaged Coalition Incident Response (CIR¹) for recovery. Within 3.5 hours, CIR deployed endpoint monitoring and initiated response efforts.
The manufacturer’s backups, managed through Veeam software, were also compromised by the threat actor, and 50-60% of the data was encrypted. The insured couldn’t fully resume operations despite recovering about 75% of the data from their Veeam and Azure Cloud backups. This issue, combined with concern that the threat actor would leak client data led them into negotiations with the threat actor, ultimately reducing the ransom demand of $1.5 million to less than half the initial amount. The threat actor provided the decryptor and confirmed the deletion of stolen files. The insured’s Cyber Extortion and Breach Response coverage under their policy² handled the ransom payment and the cost of CIR.
CIR’s forensic investigation couldn’t determine the exact cause of the ransomware attack due to the lack of logs maintained by the insured. However, they discovered an unauthorized device accessing the insured’s VPN, indicating a breach in the VPN’s firewall.
Coalition brings together active monitoring, incident response, and comprehensive insurance to solve cyber risk. To learn more, visit coalitioninc.com.
1. Breach response included the engagement of an incident response firm; the insured selected Coalition Incident Response. 2. The claim scenarios described here are intended to show the types of situations that may result in claims. These scenarios should not be compared to any other claim. Whether or to what extent a particular loss is covered depends on the facts and circumstances of the loss, the terms and conditions of the policy as issued and applicable law.
Ready to learn more?
Our brokers and policyholders get access to all of the intel we have on how to prevent, remedy, and recover from breaches of all kinds.
We’re bringing a new approach to managing digital risk, and the world has noticed. Here’s what people are saying about Coalition.
We’re a team of experts, backed by powerful partners, developing a safer world.
Coalition’s products are offered with the financial security of Allianz Group* (A.M. Best A+ rating), Arch Specialty Insurance Company (A.M. Best A+ rating), Ascot Group** (A.M Best A rating), Fortegra Group (A.M. Best A- rating), Lloyd’s of London (A.M. Best A rating), Swiss Re Corporate Solutions*** legal entities (A.M. Best A+ rating), Vantage Risk Specialty Insurance Company (A.M. Best A- rating), and Chaucer Insurance Company DAC (A.M. Best A rating).
© 2024 Coalition, Inc. | Licensed in all 50 states and D.C. | CA License # 0L76155
* Insurance products are offered in the U.S. by Coalition Insurance Solutions Inc., a licensed insurance producer and surplus lines broker. Insurance products may not be available in all states, For further details see here. ** Insurance products may be underwritten by Ascot Specialty Insurance Company, Ascot Insurance Company, or an affiliated company, which are members of Ascot Group. *** Insurance products may be underwritten by North American Capacity Insurance Company, Swiss Re Corporate Solutions America Insurance Corporation, or an affiliated company, which are members of Swiss Re Corporate Solutions. Fortegra® is the marketing name for the service contract and insurance operations of the subsidiaries of The Fortegra Group, Inc.