Artificial intelligence (AI) is exerting a powerful and paradoxical influence on the cyber insurance industry. On one hand, it's driving a massive wave of investment, with a Q1 2026 report from Gallagher Re revealing that 95% of the $1.63 billion in InsurTech funding was directed at AI-focused companies. On the other hand, a dramatic spike in AI-related litigation is causing major insurance carriers like Berkshire Hathaway, Chubb, and Travelers to actively shed AI-related risk by adding broad liability exclusions to their standard commercial policies. This divergence is creating a new, complex category of "Digital Risks" and leaving many businesses in a state of uncertainty about their coverage.
The market is being pulled in two opposing directions:
1. The Investment Boom (The "Pro-AI" Force):
2. The Liability Crisis (The "Anti-AI" Force):
This trend affects nearly every sector of the economy:
The primary impact is the creation of a new, challenging risk environment.
For businesses navigating this new landscape, proactive risk management is key:

Cybersecurity professional with over 10 years of specialized experience in security operations, threat intelligence, incident response, and security automation. Expertise spans SOAR/XSOAR orchestration, threat intelligence platforms, SIEM/UEBA analytics, and building cyber fusion centers. Background includes technical enablement, solution architecture for enterprise and government clients, and implementing security automation workflows across IR, TIP, and SOC use cases.
Help others stay informed about cybersecurity threats
Every tactic, technique, and sub-technique used in this threat has been identified and mapped to the MITRE ATT&CK framework for consistent, actionable threat language.
Observables and indicators of compromise (IOCs) have been extracted and cataloged. Risk has been assessed and correlated with known threat actors and historical campaigns.
Detection rules, incident response steps, and D3FEND-aligned mitigation strategies are included so your team can act on this intelligence immediately.
Structured threat data is packaged as a STIX 2.1 bundle and can be visualized as an interactive graph — relationships between actors, malware, techniques, and indicators.
Sigma detection rules are derived from the threat techniques in this article and can be converted for deployment across any major SIEM or EDR platform.