Cyber Attacks on Freezers Highlight Security Vulnerabilities

A wave of cyberattacks targeting operational freezers throughout Europe has raised alarms regarding the intertwining risks of digital and physical property exposures. According to Monica Tigleanu, lead cyber underwriter at MS Amlin, these incidents serve as a significant reminder of the potential for cyber incidents to lead to tangible physical losses.

Understanding the Risks

The immediate fallout from these cyber breaches has resulted in spoiled stocks, particularly impacting vital supplies like blood in French banks. However, as Tigleanu points out, the potential hazards extend beyond immediate losses; they could jeopardize overall building safety.

Blurred Lines Between Digital and Physical

Tigleanu emphasizes that the ongoing situation illustrates the increasingly blurred lines separating cyber risks from physical properties. She insists on the importance of understanding how various insurance policies and coverage can react to such scenarios.

Many systems, particularly those in operations, have historically been designed to function for decades and were only linked to the internet later to facilitate remote monitoring. Unfortunately, in several instances, the cybersecurity measures put in place may not have evolved as rapidly as their connectivity, resulting in considerable vulnerabilities.

Widespread Implications Across Industries

This isn't just an isolated issue limited to blood banks; Tigleanu warns that hospitals, hotels, pharmaceutical suppliers, and food manufacturers might all be susceptible to similar threats. Operational technology remains a significant blind spot for both businesses and their insurers, making it crucial for organizations to recognize the risks.

“Cyber underwriters often lack detailed insights into these systems through sufficient portfolio analysis at the company level,” said Tigleanu. This lack of visibility complicates the evaluation of potential physical losses that could arise from cyber breaches.

Proactive Measures for Businesses

Bills aside, businesses must step up to prevent cyber vulnerabilities from resulting in physical damage. Instead of waiting for breaches to occur, companies should assess their operational resilience and scrutinize their insurance policies. Understanding which systems are vulnerable, who has access to them, and establishing independent safeguards can significantly mitigate risks.

Tigleanu's urging is clear: businesses must prioritize cyber resilience actively to protect themselves from the growing blurring of lines between digital and physical risks. A proactive approach is their best defense against potential future threats.