Exposure Library / Perils / Data Breach

Peril · Data Breach

Data breaches start with what is left reachable.

Databases, storage and file transfer services that answer to anyone on the internet are a direct path to sensitive data. So is data that crosses the internet without encryption. The Data Breach dial estimates how likely that is for this applicant today.

Trusted by leading carriers and brokers

Johnson Kendall Johnson
Crum & Forster
Allied World
Trium Property
Sullivan Group
Profinity
Intact Insurance
Munich Re
Old Republic Cyber
What drives the dial

What the scan looks for.

Unsecured databases

Database engines reachable from outside, with weak or no access controls.

Open storage and file transfer

Misconfigured cloud storage and file transfer services without adequate access controls.

Weak encryption

Missing or weak TLS and services that send data in plaintext.

How it shows up

In the report.

The Data Breach dial sits in the Security Score. The findings behind it are in Risk Detections, and the Infrastructure section shows whether they’re concentrated on one host.

How to read the score →

Representative finding
FindingDatabase service reachable from the internet
DomainDatabase
PerilData Breach
Hazard categoryUnsecured databases reachable externally
Fed by these domains

Where data breach exposure sits.

Real-world context

What similar incidents cost.

The report’s Incident Lawsuits section matches the applicant to comparable real cases by industry, size and attack profile. It gives pricing context; it isn’t a prediction.

Questions to raise

Common subjectivities.

  • Restrict database and storage access to internal networks.
  • Require access controls on file transfer services.
  • Enforce encryption in transit on services that carry data.

Need to know whether a known exploited flaw actually works on an insured’s host? RED Scan →

Other perils: Ransomware · Social Engineering · Business Interruption

Back-test us against your own book.

Send five past submissions you’ve already bound, conditioned or declined. We score them blind, then put our read next to the call you made.