AI's Dual Impact: Fueling InsurTech Investment While Spurring Liability Exclusions

AI Drives Investment and Uncertainty in Cyber Insurance Market

INFORMATIONAL
May 17, 2026
4m read
Policy and ComplianceRegulatory

Related Entities

Full Report

Executive Summary

Artificial intelligence (AI) is exerting a powerful and paradoxical influence on the cyber insurance industry. On one hand, it's driving a massive wave of investment, with a Q1 2026 report from Gallagher Re revealing that 95% of the $1.63 billion in InsurTech funding was directed at AI-focused companies. On the other hand, a dramatic spike in AI-related litigation is causing major insurance carriers like Berkshire Hathaway, Chubb, and Travelers to actively shed AI-related risk by adding broad liability exclusions to their standard commercial policies. This divergence is creating a new, complex category of "Digital Risks" and leaving many businesses in a state of uncertainty about their coverage.


Regulatory Details

The market is being pulled in two opposing directions:

1. The Investment Boom (The "Pro-AI" Force):

  • Gallagher Re's Q1 2026 Global InsurTech Report highlights sustained capital interest in AI as a tool for underwriting and managing risk.
  • Insurers are investing in or partnering with AI companies to better model cyber risk, price policies more accurately, and even provide AI-driven security services to their clients to reduce claims.
  • This represents the belief that AI is a solution to the challenges of digital risk.

2. The Liability Crisis (The "Anti-AI" Force):

  • A separate report noted a staggering 978% increase in generative AI-related lawsuits in the US between 2021 and 2025.
  • These lawsuits cover a wide range of issues, including:
    • Employment discrimination from AI-powered hiring tools.
    • Intellectual property violations from AI models trained on copyrighted data.
    • Errors and Omissions (E&O) claims from flawed advice or content generated by AI.
  • In response, major carriers have successfully filed for regulatory approval to add broad AI exclusion clauses to Commercial General Liability (CGL) and other standard policies. This effectively makes many AI-related risks uninsurable under traditional coverage.

Affected Organizations

This trend affects nearly every sector of the economy:

  • Insurers: They are grappling with how to price a new, rapidly evolving, and poorly understood category of risk. The fear of "silent AI risk"—unintentionally covering a massive AI-related event they haven't priced for—is driving the push for exclusions.
  • Businesses Using AI: Companies deploying AI tools for everything from marketing to product development may find they have significant gaps in their insurance coverage. A standard E&O policy may no longer cover a lawsuit stemming from their AI's output.
  • AI Developers and Vendors: These companies are at the forefront of the liability issue and will likely need to seek out highly specialized, expensive insurance products to cover their operations.

Impact Assessment

The primary impact is the creation of a new, challenging risk environment.

  • Coverage Gaps: Many businesses may be unknowingly operating without coverage for their AI-related activities. The broad language of the new exclusions could be interpreted to deny claims for a wide variety of incidents.
  • Market Opportunity: This creates a significant opportunity for specialized insurers or managing general agents (MGAs) to create new products specifically designed to cover AI liability. This could include policies like "AI performance guarantees."
  • Convergence of Risk: The traditional lines between Cyber Insurance, Professional Indemnity (E&O), and other policies are blurring. The industry is moving towards a more holistic concept of a single "Digital Risks" business line that covers all technology-related liabilities.
  • Increased Scrutiny: Underwriters will begin to ask much more detailed questions about a company's use of AI, its risk management policies, and the governance around its AI models.

Compliance Guidance

For businesses navigating this new landscape, proactive risk management is key:

  1. Review Your Policies: Work with your insurance broker to conduct a thorough review of all your commercial policies. Specifically ask how your policies would respond to a lawsuit related to your use of AI.
  2. Conduct an AI Inventory: Understand and document all the ways your organization is using AI, both internally and in customer-facing products.
  3. Develop an AI Governance Framework: Create clear policies and procedures for the ethical and responsible use of AI. This should include guidelines on data privacy, model validation, and human oversight.
  4. Seek Specialized Coverage: If your use of AI is a core part of your business, you may need to purchase a specialized AI liability policy. Be prepared for a detailed underwriting process.
  5. Document Everything: In the event of a claim, clear documentation of your AI governance framework and decision-making processes will be invaluable.

Timeline of Events

1
May 17, 2026
This article was published

Sources & References

This Week's Top Five Stories in Cyber
Cyber Magazine (cybermagazine.com) May 16, 2026

Article Author

Jason Gomes

Jason Gomes

• Cybersecurity Practitioner

Cybersecurity professional with over 10 years of specialized experience in security operations, threat intelligence, incident response, and security automation. Expertise spans SOAR/XSOAR orchestration, threat intelligence platforms, SIEM/UEBA analytics, and building cyber fusion centers. Background includes technical enablement, solution architecture for enterprise and government clients, and implementing security automation workflows across IR, TIP, and SOC use cases.

Threat Intelligence & AnalysisSecurity Orchestration (SOAR/XSOAR)Incident Response & Digital ForensicsSecurity Operations Center (SOC)SIEM & Security AnalyticsCyber Fusion & Threat SharingSecurity Automation & IntegrationManaged Detection & Response (MDR)

Tags

AICyber InsuranceInsurTechLiabilityRisk ManagementRegulation

📢 Share This Article

Help others stay informed about cybersecurity threats

🎯 MITRE ATT&CK Mapped

Every tactic, technique, and sub-technique used in this threat has been identified and mapped to the MITRE ATT&CK framework for consistent, actionable threat language.

🧠 Enriched & Analyzed

Observables and indicators of compromise (IOCs) have been extracted and cataloged. Risk has been assessed and correlated with known threat actors and historical campaigns.

🛡️ Actionable Guidance

Detection rules, incident response steps, and D3FEND-aligned mitigation strategies are included so your team can act on this intelligence immediately.

🔗 STIX Visualizer

Structured threat data is packaged as a STIX 2.1 bundle and can be visualized as an interactive graph — relationships between actors, malware, techniques, and indicators.

Sigma Generator

Sigma detection rules are derived from the threat techniques in this article and can be converted for deployment across any major SIEM or EDR platform.