Payments down 44%, claims up 40%. An ecosystem earning less per victim has an obvious incentive to increase volume.
Ransomware is 28% of claims and 52% of the money. BEC is the most frequent and among the cheapest. They need separate budgets.
Aggregate premium fell while individual quotes rose 15–20%. The correction lands hardest on those least able to fund controls.
Two files now where the market regulator surfaced an incident the data regulator would not have.
A skills shortage is a supply problem. A budget shortage is a demand problem. The entire skills-gap apparatus is aimed at the wrong side of the market.
Where a market has one dominant platform, the distinction between a customer list and a national register largely disappears.
The mechanism works. Its scope is defined by the wrong boundary — these incidents are not sector-shaped.
A credit application is the densest identity document an ordinary person produces. Most of the people in the database were declined.
Domains are replaced in days. Escrow is the mechanism that lets parties who would defraud each other trade at all.
A CRO holds unpublished, market-moving results for competing sponsors simultaneously, and no register would record their exposure.
Removing the largest operator did not reduce the market. It redistributed it into smaller, less trackable operations.
A regulator receiving a dozen filings describing the same technique could warn the market. That is not a new obligation — it is a use of filings that already exist.
Payments become known; refusals do not. The observable signal is biased towards paying, and it is the observable signal that sets expectations.
444 counts events. 133 counts things somebody assessed as saleable and put on the market.
The largest incidents in this database are measured only as a byproduct of a commercial risk-transfer market.
In a lawful market, removing the dominant supplier reduces volume because capacity is expensive to replace. Here the capacity is software.
If this corpus’s assumptions came from markets with a desktop phase, they may describe the minority condition.
An American software vendor’s outage changed what was on sale in British supermarkets.
A password is a claim to be checked. A cookie is the receipt showing the check already happened.
The first war-exclusion case filed, and the one that never got a ruling. The market took its answer from Merck and rewrote the clause.
The war clause failed in court, so the market wrote a new one with attribution built in. Nobody has yet said who decides.
Ten bitcoin across a billion people is a fraction of a cent each. That is the market price.
An exclusion written for armies, applied to a software update. Two courts said no, and the market rewrote the clause rather than argue again.
Confirmed: an attack in four markets and access at one Thai processor. Claimed: 3 terabytes of medical data. The two never met.
The first carrier to say it would not reimburse the ransom, in one country, for new policies. Nobody else followed.