Desk live·
ForensicPost
Breaches/Analysis/File 25-0708

Insurance Is the Only Party Measuring Availability

When a distributor cannot invoice or a factory cannot build, no register records it. A business-interruption claim does — which makes insurers the only institution systematically pricing the harm.

Constructed geometry · not a chart of case data
TargetAvailability incidents
ActorMultiple
S. Rosler11 min readConfidence: medium2 sources reviewed

This desk has filed repeatedly that availability harm is unmeasured: no notification, no register, no statistic — at 26-0209, at 25-0902, at 25-0606. That is true of the public record. It is not true absolutely.

A Claim Is A Measurement

A business-interruption claim requires the insured to establish what stopped, for how long, and what it cost, in a form an adjuster will accept and a court could review. That is a more rigorous quantification of availability harm than anything in the public domain.

The insurer then aggregates across its book, prices next year’s premiums on it, and reinsures the tail. Somewhere in that process sits the closest thing that exists to a real dataset on what outages cost.

It Is The Wrong Institution To Be The Only One Holding It

The data is proprietary, and it is the basis of competitive advantage in underwriting. It covers only insured organisations — excluding the uninsured, the self-insured, and the public bodies at 25-0918 that could not buy cover if they wanted to.

And it is filtered by claims behaviour rather than by incidence: losses below deductible do not appear, and organisations that fear a premium increase may not claim at all. It is a measurement of insured, claimed, accepted loss, which is a specific and non-random subset.

What Follows

The reinsurer analysis this desk cited at 25-0728 is drawn from precisely this data, and it is genuinely among the more useful material in the corpus for exactly that reason.

The observation to hold onto is that an entire category of harm — the category containing the largest incidents in this database — is measured only as a byproduct of a commercial risk-transfer market. Graded medium: the structure is clear, and this desk cannot see inside the data to characterise it.

This is an analysis file

Built on published insurance-sector material, listed below, read against the availability incidents in this database. We have no access to claims data and characterise the mechanism rather than its contents. Corrections: corrections@forensicpost.com.

Sources
  1. Cyberattack disrupts operations for major natural foods supplierRisk & Insurance Education Alliance
  2. Cyber risk in the food supply chain: what an attack actually costs a food businessCoughlin Insurance Services
S. Rosler
Covers extortion groups and leak-site economics. Verifies our sample sets.
// the chain of custody — tuesdays

Get the next file first.

One incident a week, taken apart properly. Logs, timelines, and what the filing left out.

PGP-signed edition · no tracking pixels · one-click unsubscribe
© 2026 ForensicPost Media · the desk · newsletter · searchGlossary