--- title: The Top Reason Businesses Make a Cyber Insurance Claim - Business Email Compromise description: Insurance giant AIG has issued a report which reveals that there is a new leader in the list of top threats causing losses for businesses image: https://businessinsights.bitdefender.com/hubfs/insurance-1.jpeg --- [![](https://businessinsights.bitdefender.com/hubfs/2021/09/logo-white.svg)](https://businessinsights.bitdefender.com/?hsLang=en-us) [![CONTACT AN EXPERT](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd) - [For Home](https://www.bitdefender.com/solutions/) - [For Business](https://www.bitdefender.com/business/) - [Resources](https://www.bitdefender.com/business/resource-library.html) - [Webinars](https://www.bitdefender.com/business/webinars.html) # [BUSINESS INSIGHTS](https://businessinsights.bitdefender.com/?hsLang=en-us) By [**Graham Cluley**](https://businessinsights.bitdefender.com/author/graham-cluley) / Aug 30, 2019 # The Top Reason Businesses Make a Cyber Insurance Claim - Business Email Compromise Share this [![Share on email](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/email-color.png)](mailto:?subject=Check%20out%20https://businessinsights.bitdefender.com/the-top-reason-businesses-make-a-cyber-insurance-claim-business-email-compromise&utm_medium=social&utm_source=email%20&body=Check%20out%20https://businessinsights.bitdefender.com/the-top-reason-businesses-make-a-cyber-insurance-claim-business-email-compromise&utm_medium=social&utm_source=email) [![Share on twitter](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://businessinsights.bitdefender.com/the-top-reason-businesses-make-a-cyber-insurance-claim-business-email-compromise&utm_medium=social&utm_source=twitter&url=https://businessinsights.bitdefender.com/the-top-reason-businesses-make-a-cyber-insurance-claim-business-email-compromise&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on linkedin](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://businessinsights.bitdefender.com/the-top-reason-businesses-make-a-cyber-insurance-claim-business-email-compromise&utm_medium=social&utm_source=linkedin) [![Share on facebook](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/facebook-color.png)](http://www.facebook.com/share.php?u=https://businessinsights.bitdefender.com/the-top-reason-businesses-make-a-cyber-insurance-claim-business-email-compromise&utm_medium=social&utm_source=facebook) AIG, one of the largest insurance companies in the world, has issued a [report](https://www.aig.co.uk/insights/claims-intelligence-cyber-report-2019) which reveals that there is a new leader in the list of top threats causing losses for businesses. Regular readers of Bitdefender Business Insights will not be at all surprised to see that Business Email Compromise (BEC) is now the top cause of loss for cyber claims, accounting for a massive 23%. That outstrips ransomware (18%), which AIG says has become increasingly targeted and disruptive in the last year. ![cyber-chart](https://businessinsights.bitdefender.com/hs-fs/hubfs/cyber-chart.jpeg?width=600&name=cyber-chart.jpeg) Meanwhile data breaches caused by hackers and data breaches due to employee negligence tie for third place at 14% each. One of the reasons that Business Email Compromise attacks work so well is because we’re all too trusting of email. Just because you receive an email which appears to come from your boss’s email account, doesn’t mean that your boss really sent it to you. It’s perfectly possible that it’s someone who is forging your boss’s email address or – worse – has managed to compromise your boss’s email account in order to send you fraudulent messages, perhaps asking you to transfer funds into a bank account under a hacker’s control, or forward sensitive information. An alternative form of BEC attack sees fraudsters pose as suppliers working on projects for your company, and then send bogus invoices asking for payments to be made into their accounts. With inside information - perhaps gleaned from a hacked email account - about the genuine projects being undertaken, the fake communications can appear very convincing and millions of dollars can be transferred into the wrong bank account. AIG says it created a new category for BEC attacks following "a high number of BEC-related claims" over the last 12 months. By comparison, says that BEC only accounted for 11% of claims in 2017. "Ultimately what’s behind a lot of these compromises is organised crime,” says Jonathan Ball, partner at Norton Rose Fulbright. “They’re not interested in stealing personal data and selling it on the dark web. It’s pure financial fraud.” “We’re still seeing a surprisingly high level of these forms of fraud being perpetrated and some are affecting quite large and sophisticated clients," said Jose Martinez, AIG's vice president of financial lines major loss claims in EMEA. "You may think that every CFO at a large company would know about this by now, but it’s still happening.” According to AIG's report, the financial service sector was the first to appreciate the importance of cyber insurance and became the most significant market. However, this new report reveals that it is now professional service firms such as law firms and accountants topping the list - rising from 18% to 22%. ![industry-chart](https://businessinsights.bitdefender.com/hs-fs/hubfs/industry-chart.jpeg?width=579&name=industry-chart.jpeg) The fact that the financial services industry is heavily regulated may have helped ensure that it has lost its poll position in the chart to businesses that have less controls in place. As we described last month, fraudsters attempting Business Email Compromise attacks are calculated to have [stolen a staggering $9 billion](https://businessinsights.bitdefender.com/fraudsters-steal-million-business-email-compromise?hsLang=en-us) since September 2016. As ever, companies would be wise to double-check what their insurance policies actually cover and what they exclude. Business Email Compromise, for instance, may not necessarily fall under a cyber insurance policy and may instead be covered by a more generic crime insurance. Don't assume just because you've ticked a box marked "cyber insurance" that it means you're covered. And it should go without saying that it is imperative that email accounts are protected with multi-factor authentication, and that staff are educated about the enormous threat posed by Business Email Compromise attacks to ensure that they are not the ones who put their company at significant risk. ### Explore More Topics - [Enterprise Security (743)](https://businessinsights.bitdefender.com/topic/enterprise-security) - [Threat Research (201)](https://businessinsights.bitdefender.com/topic/threat-research) - [Cloud Security (174)](https://businessinsights.bitdefender.com/topic/cloud-security) - [SMB Security (170)](https://businessinsights.bitdefender.com/topic/smb-security) - [Ransomware (166)](https://businessinsights.bitdefender.com/topic/ransomware) - [Privacy and Data Protection (137)](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) - [Cybersecurity Awareness (134)](https://businessinsights.bitdefender.com/topic/cybersecurity-awareness) - [Endpoint Protection & Management (126)](https://businessinsights.bitdefender.com/topic/endpoint-protection-management) - [Endpoint Detection and Response (124)](https://businessinsights.bitdefender.com/topic/endpoint-detection-and-response) - [Managed Detection and Response (119)](https://businessinsights.bitdefender.com/topic/managed-detection-and-response) - [Virtualization & Data Center Security (82)](https://businessinsights.bitdefender.com/topic/virtualization-data-center-security) - [Threat Intelligence (76)](https://businessinsights.bitdefender.com/topic/threat-intelligence) - [IT Compliance & Regulations (71)](https://businessinsights.bitdefender.com/topic/it-compliance-regulations) - [Bitdefender Threat Debrief (55)](https://businessinsights.bitdefender.com/topic/bitdefender-threat-debrief) - [Managed Service Providers (53)](https://businessinsights.bitdefender.com/topic/managed-service-providers) - [#Featured (52)](https://businessinsights.bitdefender.com/topic/featured) - [Advanced Persistent Threats (46)](https://businessinsights.bitdefender.com/topic/advanced-persistent-threats) - [Events (38)](https://businessinsights.bitdefender.com/topic/events) - [Independent Testing (18)](https://businessinsights.bitdefender.com/topic/independent-testing) - [Cybersecurity Advisory Services (9)](https://businessinsights.bitdefender.com/topic/cybersecurity-advisory-services) - [Podcast (3)](https://businessinsights.bitdefender.com/topic/podcast) - [top (2)](https://businessinsights.bitdefender.com/topic/top) See all topics ### Subscribe to Blog Updates ## Read more about this topic ### [18 Percent of Businesses Would Consider Sabotaging a Rival Online Business, New Research Shows](https://businessinsights.bitdefender.com/18-percent-of-businesses-would-consider-sabotaging-a-rival-online-business-new-research-shows?hsLang=en-us) ### [Cybercrime – The Trillion Dollar Business](https://businessinsights.bitdefender.com/cybercrime-the-trillion-dollar-business?hsLang=en-us) ### [How Cyber Resilience Enables Business Growth](https://businessinsights.bitdefender.com/how-cyber-resilience-enables-business-growth?hsLang=en-us) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2685110570-png/Bitdefender-Mar2015-Theme/Images/avatar_img_footer.png) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2676149282-png/Bitdefender-Mar2015-Theme/Images/logo_white_footer.png) - [![https://twitter.com/Bitdefender_Ent](https://businessinsights.bitdefender.com/hs-fs/file-2658233851-png/Bitdefender-Mar2015-Theme/Images/ft_soc_tw.png?width=33&name=ft_soc_tw.png)](https://twitter.com/Bitdefender_Ent) - [![Linkedin-icon-300x300](https://businessinsights.bitdefender.com/hs-fs/hubfs/Bitdefender-Mar2015-Theme/Images/Linkedin-icon-300x300.png?width=33&name=Linkedin-icon-300x300.png)](https://www.linkedin.com/company/bitdefender-gravityzone-enterprise-security) - [![](https://businessinsights.bitdefender.com/hs-fs/file-2676149307-png/Bitdefender-Mar2015-Theme/Images/ft_soc_yt.png)](https://www.youtube.com/user/BitdefenderSecurity) - [Legal Terms](https://www.bitdefender.com/legal/) - [Privacy Policy](https://www.bitdefender.com/site/view/legal-privacy-policy-for-bitdefender-websites.html) - [EULA](https://www.bitdefender.com/site/view/legal-eula.html) - [Contact Us](https://www.bitdefender.com/business/contact.html) Copyright © 1997-2023 Bitdefender All rights reserved. ![](https://px.spiceworks.com/px/5rec) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Graham Cluley", "url" : "https://businessinsights.bitdefender.com/author/graham-cluley" }, "dateModified" : "2019-09-03T08:33:01.411Z", "datePublished" : "2019-08-30T07:02:00.000Z", "headline" : "The Top Reason Businesses Make a Cyber Insurance Claim - Business Email Compromise", "image" : [ "https://businessinsights.bitdefender.com/hubfs/insurance-1.jpeg" ], "mainEntityOfPage" : { "@id" : "https://businessinsights.bitdefender.com/the-top-reason-businesses-make-a-cyber-insurance-claim-business-email-compromise", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://businessinsights.bitdefender.com/hubfs/Bitdefender_Logo_Transparent-2.png" }, "name" : "Bitdefender" } } ```