Hacktivism
A computer attack carried out in the name of a political or ideological cause, whose motive, and sometimes hidden sponsor, pushes an ordinary cyber loss toward political violence covers.
Hacktivism refers to the use of cyberattacks in service of a political, ideological or social cause, rather than financial gain. Its methods are well known: denial of service against official websites, defacement, leaks of internal documents, sometimes sabotage. It was long treated as a low-severity nuisance, and insurers covered it without much thought like any malicious act. Two developments changed that. Since 2022, some groups claiming to be hacktivists act in coordination with intelligence services, or serve as their front, which blurs the line between a militant act and a state operation. And the political motive, irrelevant in a cyber policy, becomes decisive in a property policy or a political violence cover, where the definition of a political or terrorist act determines coverage. For the underwriter, hacktivism therefore raises the question of characterization before the question of amount: who acted, for whom, and which clause that answer triggers.
On March 10 and 11, 2024, several French ministries and public services suffered denial-of-service attacks of an intensity the government described as unprecedented, claimed by a group presenting itself as hacktivist. Sites were slowed or unreachable for a few hours, with no data lost, which illustrates the usually low severity and high political reach of the phenomenon.
hacktivism, hacktivists
Follow the research
One letter a week. First, the week's underwriting note, when one is published: a dated, argued decision, signed by Paul Bernardski. Then what the observatory published on cyber risk, political risk and insurance. No account, no tracking.
No spam, one-click unsubscribe, no data ever sold.