Ransomware, MFA, and the Blame Game: ACE’s Subrogation Push

When third parties miss the basics, carriers come knocking.

ACE paid a $500,000 ransomware claim and now says the cloud host lacked Multi-factor Authentication or (MFA), while the security vendor down rated an alert. Expect more of this. Subrogation is how carriers recover losses when vendors stumble.

The lesson for buyers is boring and crucial: who owns MFA, logging, and backups; what are time to alert and escalation thresholds; and which indemnities survive the contract. Put them in writing and test them in drills.

Jurors do not need PhDs if the story is simple: basic controls were promised, basic controls were not in place. That is negligence in any language.

—
Jack Hapsburg
Got denied or lowballed on a claim? Good. You just found your people.
👉 Join our Telegram Rebels @Inssuxdotcom (https://t.me/Inssuxdotcom)

#MakeThemPay #InsuranceJustice #InsSux #InsuranceReform