War or Cost of Doing Business? Cyber Insurers Hashing Out Exclusions

Merck settled its long-running dispute with insurers over $699M in denied NotPetya-related claims, following lower-court rulings favoring Merck against “war/hostile act” exclusions. The article highlights how the case and subsequent Lloyd’s guidance have driven clearer state-backed cyberattack exclusions, advises organizations to scrutinize policy wording and exclusions, and underscores the importance of preventive cybersecurity measures over relying on insurance payouts.