Lloyd's of London reboots after dodgy network activity detected
(2022/10/07)
- Reference: 1665101603
- News link: https://www.theregister.co.uk/2022/10/07/lloyds_london_security_incident/
- Source link:
Lloyd's of London has reset its IT systems and is probing a possible cyberattack against it after detecting worrisome network behavior this week.
"Lloyd's has detected unusual activity on its network and we are investigating the issue," a spokesperson told The Register on Thursday. "As a precautionary measure, we are resetting the Lloyd's network and systems. All external connectivity has been turned off, including Lloyd's delegated authority platforms."
The UK-based insurance marketplace, which is made up of about 80 insurance syndicates that underwrite risk, added: "We have informed market participants and relevant parties, and we will provide more information once our investigations have concluded."
[1]
Lloyd's spokesperson wouldn't be drawn on further immediate details regarding the security snafu, including whether any data was stolen, if it was a ransomware attack, and who was potentially behind the intrusion.
[2]
[3]
The insurance market has [4]supported sanctions against Russia that aim to punish President Vladimir Putin for invading neighboring Ukraine. These include a UK and European Union [5]ban on insuring ships carrying Russian oil.
Additionally, word of the weird Lloyd's network activity comes shortly after a [6]warning from Kyiv that Russia plans to conduct "massive cyberattacks" on Ukraine and its allies' critical infrastructure and power grids.
[7]
The odd network traffic at the insurance souk follows several high-profile cyberattacks over the past couple months that hit a [8]major US healthcare network , the [9]Los Angeles Unified School District , [10]Uber and [11]Rockstar Games .
[12]Unhappy about excluding nation-state attacks from cyberinsurance? Get ready to pay
[13]Lloyd's to exclude certain nation-state attacks from cyber insurance policies
[14]Huge nonprofit hospital network suffers IT meltdown after 'security incident'
[15]Moody's turns up the heat on 'riskiest' sectors for cyberattacks
Even before detecting a possible IT intrusion, Lloyd's has been in the infosec headlines since late August after making changes to its policies that will soon prohibit its syndicates from covering losses arising from certain nation-state cyberattacks and those that happen during wars.
In a [16]memo sent to its syndicates, underwriting director Tony Chaudhry said Lloyd's remains "strongly supportive" of cyberattack coverage. However, as these threats continue to grow, they may "expose the market to systemic risks that syndicates could struggle to manage," [17]he added [PDF], noting that nation-state-sponsored attacks are particularly costly to insure.
According to Lloyd's [18]2021 annual report , it took in £39.2 billion ($45 billion) in gross written premiums and took in £2.3 billion ($2 billion) in profit before tax. ®
Get our [19]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Yz@kWrjc1A5jEAun9LyY8gAAAMI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Yz@kWrjc1A5jEAun9LyY8gAAAMI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Yz@kWrjc1A5jEAun9LyY8gAAAMI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[4] https://www.reuters.com/markets/europe/lloyds-london-says-working-with-regulators-implement-russia-sanctions-2022-06-01/
[5] https://www.npr.org/2022/06/03/1102990015/the-eu-will-likely-bar-insurance-on-ships-carrying-russian-oil-itd-be-a-big-blow
[6] https://www.theregister.com/2022/09/27/russia_plans_massive_cyberattacks_ukraine/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Yz@kWrjc1A5jEAun9LyY8gAAAMI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2022/10/06/commonspirit_health_cyberattack/
[9] https://www.theregister.com/2022/09/06/lausd_ransomware_fbi_cisa_los_angeles/
[10] https://www.theregister.com/2022/09/16/uber_security_incident/
[11] https://www.theregister.com/2022/09/19/grand_theft_auto_6_hacked/
[12] https://www.theregister.com/2022/09/06/lloyds_cyber_insurance_policy/
[13] https://www.theregister.com/2022/08/24/lloyds_cybersecurity_insurance/
[14] https://www.theregister.com/2022/10/06/commonspirit_health_cyberattack/
[15] https://www.theregister.com/2022/10/03/moodys_cyber_risk_ratings/
[16] https://www.theregister.com/2022/08/24/lloyds_cybersecurity_insurance/
[17] https://assets.lloyds.com/media/35926dc8-c885-497b-aed8-6d2f87c1415d/Y5381%20Market%20Bulletin%20-%20Cyber-attack%20exclusions.pdf
[18] https://www.lloyds.com/about-lloyds/investor-relations/financial-performance/financial-results/full-year-results-2021
[19] https://whitepapers.theregister.com/
"Lloyd's has detected unusual activity on its network and we are investigating the issue," a spokesperson told The Register on Thursday. "As a precautionary measure, we are resetting the Lloyd's network and systems. All external connectivity has been turned off, including Lloyd's delegated authority platforms."
The UK-based insurance marketplace, which is made up of about 80 insurance syndicates that underwrite risk, added: "We have informed market participants and relevant parties, and we will provide more information once our investigations have concluded."
[1]
Lloyd's spokesperson wouldn't be drawn on further immediate details regarding the security snafu, including whether any data was stolen, if it was a ransomware attack, and who was potentially behind the intrusion.
[2]
[3]
The insurance market has [4]supported sanctions against Russia that aim to punish President Vladimir Putin for invading neighboring Ukraine. These include a UK and European Union [5]ban on insuring ships carrying Russian oil.
Additionally, word of the weird Lloyd's network activity comes shortly after a [6]warning from Kyiv that Russia plans to conduct "massive cyberattacks" on Ukraine and its allies' critical infrastructure and power grids.
[7]
The odd network traffic at the insurance souk follows several high-profile cyberattacks over the past couple months that hit a [8]major US healthcare network , the [9]Los Angeles Unified School District , [10]Uber and [11]Rockstar Games .
[12]Unhappy about excluding nation-state attacks from cyberinsurance? Get ready to pay
[13]Lloyd's to exclude certain nation-state attacks from cyber insurance policies
[14]Huge nonprofit hospital network suffers IT meltdown after 'security incident'
[15]Moody's turns up the heat on 'riskiest' sectors for cyberattacks
Even before detecting a possible IT intrusion, Lloyd's has been in the infosec headlines since late August after making changes to its policies that will soon prohibit its syndicates from covering losses arising from certain nation-state cyberattacks and those that happen during wars.
In a [16]memo sent to its syndicates, underwriting director Tony Chaudhry said Lloyd's remains "strongly supportive" of cyberattack coverage. However, as these threats continue to grow, they may "expose the market to systemic risks that syndicates could struggle to manage," [17]he added [PDF], noting that nation-state-sponsored attacks are particularly costly to insure.
According to Lloyd's [18]2021 annual report , it took in £39.2 billion ($45 billion) in gross written premiums and took in £2.3 billion ($2 billion) in profit before tax. ®
Get our [19]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Yz@kWrjc1A5jEAun9LyY8gAAAMI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Yz@kWrjc1A5jEAun9LyY8gAAAMI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Yz@kWrjc1A5jEAun9LyY8gAAAMI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[4] https://www.reuters.com/markets/europe/lloyds-london-says-working-with-regulators-implement-russia-sanctions-2022-06-01/
[5] https://www.npr.org/2022/06/03/1102990015/the-eu-will-likely-bar-insurance-on-ships-carrying-russian-oil-itd-be-a-big-blow
[6] https://www.theregister.com/2022/09/27/russia_plans_massive_cyberattacks_ukraine/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Yz@kWrjc1A5jEAun9LyY8gAAAMI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2022/10/06/commonspirit_health_cyberattack/
[9] https://www.theregister.com/2022/09/06/lausd_ransomware_fbi_cisa_los_angeles/
[10] https://www.theregister.com/2022/09/16/uber_security_incident/
[11] https://www.theregister.com/2022/09/19/grand_theft_auto_6_hacked/
[12] https://www.theregister.com/2022/09/06/lloyds_cyber_insurance_policy/
[13] https://www.theregister.com/2022/08/24/lloyds_cybersecurity_insurance/
[14] https://www.theregister.com/2022/10/06/commonspirit_health_cyberattack/
[15] https://www.theregister.com/2022/10/03/moodys_cyber_risk_ratings/
[16] https://www.theregister.com/2022/08/24/lloyds_cybersecurity_insurance/
[17] https://assets.lloyds.com/media/35926dc8-c885-497b-aed8-6d2f87c1415d/Y5381%20Market%20Bulletin%20-%20Cyber-attack%20exclusions.pdf
[18] https://www.lloyds.com/about-lloyds/investor-relations/financial-performance/financial-results/full-year-results-2021
[19] https://whitepapers.theregister.com/
It's not a war, goddamit. It's a Special Military Operation. And Lloyds better cover it!
"Even before detecting a possible IT intrusion, Lloyd's has been in the infosec headlines since late August after making changes to its policies that will soon prohibit its syndicates from covering losses arising from certain nation-state cyberattacks and those that happen during wars."
Not only that, but if the USSR (aka the rump Russia) has declared certain areas of the world its own (Ukraine and most of the 'stans), then there really can't be a "war" - just another putting down of an insurrection.
Sounds very much like the plan in the USofA with the (r)epuglicon party playing the part of the putinistas.
With a tiny bit of legal chicanery, Lloyd's should be able to legally weasel its way out of any reimbursements.