Warren Buffett's Berkshire Hathaway expressed caution at its annual investor meeting about cyber insurance, advising agents to sell such policies only when necessary due to the unpredictable scale of potential losses. This caution was underscored by a recent global IT outage caused by a CrowdStrike quality control issue, which affected various sectors including transportation and healthcare. While some experts like Gerald Glombicki of Fitch Ratings believe that the industry has largely priced in such risks and can manage the losses, others such as Josephine Wolff of Tufts University foresee significant business interruption claims and potential litigation arising from such incidents. The episode highlights the complexities and evolving nature of the cyber insurance market, emphasizing the need for better risk assessment and potentially more standardized policies.

CrowdStrike losses may be biggest test yet of cybersecurity insurance risk warning from Warren Buffett NBC News

The CrowdStrike outage on Friday caused significant disruptions globally, affecting airlines, delivery services, stores, and amusement parks, with potential economic damages reaching tens of billions of dollars. CrowdStrike is liable only for refunding subscription fees and not for business interruption losses. Companies are turning to their cyber insurance policies, though payouts may be slow and less than the actual losses incurred. The incident underscores the increased reliance on and potential risks of cyber insurance, especially for large businesses with negotiated terms. Observers note the irony of the outage resulting from protective software updates and anticipate lasting impacts on the cyber insurance industry.

Here comes the wave of insurance claims for the CrowdStrike outage Business Insider

The recent IT outage linked to CrowdStrike has caused significant concern within the US cyber insurance industry, but losses are expected to be contained below $1 billion, with estimates ranging between $270 million and $960 million. Coalition's CEO Joshua Motta detailed that although such cyber events raise concerns about systemic risks, they do not equate to natural catastrophe losses. Modeling insights and adjustments to cyber insurance policies, including coverage limitations and sub-limits, are being accelerated in response to these events. The evolving landscape emphasizes the need for thoughtful management of cyber perils and acknowledges the benefits of technological diversification and rapid organizational responses.

Coalition: Modelling indicates CrowdStrike US cyber insurance loss below $1bn artemis.bm

The Health Foundation in the U.K. has suggested a comprehensive strategy to maximize the benefits and mitigate the risks of AI in healthcare. They propose six key priorities: engaging the public, patients, and healthcare staff in AI's development; focusing AI efforts on critical NHS needs; enhancing data and digital infrastructure; ensuring rigorous testing and evaluation of AI technologies; establishing clear regulatory guidelines; and equipping the healthcare workforce with necessary AI skills. These priorities aim to address the urgent demand for healthcare services and workforce shortages, ensuring AI's advantages are realized broadly rather than in isolated pockets.

6 priorities for a national healthcare AI strategy from our friends in the UK AI in Healthcare