Specialist insurance products with limits up to £650 million are emerging as the only viable way to bridge the gap between digital security and physical asset protection. For years, the global insurance market has operated on a bifurcated model, meticulously separating digital risks from physical ones under the assumption that a fire or a flood is fundamentally different from a data breach or a server outage. However, as industrial systems become increasingly tethered to the internet, this traditional separation has crumbled, revealing a massive structural vulnerability in corporate risk management programs. The current landscape is defined by the convergence of Information Technology and Operational Technology, where a single line of malicious code can trigger a catastrophic failure in heavy machinery or critical infrastructure. Lockton, a prominent global insurance broker, has identified a critical disconnect that places hundreds of millions of pounds at risk, warning that most current policies are fundamentally ill-equipped to handle the fallout of a cyber-physical event. This shift is not merely theoretical; it is a live crisis that requires immediate attention from C-suite executives who have historically relegated cybersecurity to the IT department while leaving property insurance to facility managers.
The reality of modern commerce is that virtually every physical asset, from manufacturing lines to warehouse climate controls, is now part of a broader digital ecosystem. While this connectivity has driven unprecedented efficiencies and real-time oversight, it has also expanded the attack surface for bad actors who no longer seek only to steal data but to cause tangible destruction. This evolution of risk has outpaced the development of standard insurance contracts, creating a “no-man’s land” of coverage where neither property nor cyber policies provide a clear indemnity path. The financial implications are staggering, especially for businesses with high-value physical inventories or critical uptime requirements. As organizations continue to integrate smart technologies, the probability of a digital event manifesting as a physical catastrophe grows, yet the insurance market remains largely fragmented, leaving companies to discover these gaps only after a significant loss has already occurred.
The Landmark Case: The French Supermarket Breach
Operational Technology: The New Vector for Physical Destruction
The catalyst for this renewed urgency in the insurance sector was a sophisticated and highly targeted attack on the refrigeration systems of several major French supermarket groups, with Intermarché being among the most severely impacted. This incident marked a departure from the traditional ransomware model that focuses on locking files or stealing sensitive customer information. Instead, the attackers bypassed traditional security perimeters to access the Operational Technology (OT) layer, specifically the connected controllers that regulate temperatures across hundreds of industrial-grade freezer and refrigeration units. By gaining unauthorized access to the Internet of Things (IoT) infrastructure that underpins the retail cold chain, the intruders were able to manipulate physical environments from a remote digital terminal, effectively weaponizing the very systems designed to preserve the company’s most valuable physical assets.
Once the attackers secured control over the refrigeration network, they initiated a series of “forced defrost cycles” across the affected stores. Under normal operating conditions, a defrost cycle is a brief and controlled maintenance function used to prevent ice buildup on evaporator coils. However, in this malicious scenario, the attackers overrode the safety protocols, causing the heating elements in the units to run indefinitely while the cooling compressors remained deactivated. This manipulation caused the internal temperatures of the refrigeration units to climb rapidly, reportedly reaching as high as 50°C (122°F) in some instances. This extreme heat stress did more than just ruin the food; it threatened the structural integrity of the cooling hardware itself. The event demonstrated that digital sabotage is no longer confined to the virtual realm, as the consequences were immediately visible in the form of melting inventory and failing mechanical components.
Immediate Financial Consequences: Spoilage and Logistical Chaos
The immediate financial fallout of the French supermarket breach was both rapid and severe, serving as a stark warning to the global supply chain industry. In the Alsace region alone, just two supermarkets reported a combined merchandise loss of approximately €270,000. When this damage was scaled across the hundreds of locations affected by the breach, the total financial impact quickly escalated into a balance-sheet event that threatened the operational stability of the retail groups. The primary loss was the total spoilage of fresh and frozen food products, which had to be discarded immediately to comply with health and safety regulations. This massive waste represented not only a direct loss of capital but also a significant environmental and logistical challenge, as thousands of tons of spoiled goods required specialized disposal.
Beyond the initial loss of inventory, the affected retailers faced a cascade of secondary costs that compounded the financial strain. The logistical nightmare of restocking hundreds of stores simultaneously during a period of system instability put immense pressure on the supply chain. Furthermore, the loss of sales during the downtime, combined with the potential long-term damage to the refrigeration hardware caused by the extreme heat cycles, created a complex web of claims. Executives at the impacted chains estimated that a single day of such widespread disruption across a national network could easily result in losses totaling tens of millions of euros. This event highlighted the “velocity” of loss inherent in cyber-physical attacks; unlike a data breach that might take months to fully understand, an attack on OT systems can result in the total destruction of millions of dollars in physical assets in the span of a single afternoon.
Identifying the Systematic Insurance Trap
Structural Failures: Why Standard Policies Are Not Enough
Lockton’s analysis reveals a dangerous structural “trap” that leaves many businesses inadvertently self-insuring their greatest risks. Standard cyber insurance policies were originally designed to protect intangible assets, focusing on Information Technology (IT) risks like data breach notification, forensic investigations, and legal liabilities. Because these policies were never intended to cover physical perils, they almost universally include explicit exclusions for physical damage and bodily injury. In the case of the French retailers, their cyber underwriters argued that while the trigger was digital, the resulting loss—spoiled food and damaged equipment—was physical and therefore fell outside the scope of the policy. This left the companies searching for coverage in a product that was essentially built for a different era of digital risk.
On the other side of the ledger, traditional property insurance is designed to cover physical losses, but these policies have increasingly been modified to exclude risks associated with cyber events. Insurers are often unwilling to take on digital risks within a property portfolio because those policies are priced based on traditional actuarial data related to fire, weather, and theft. Consequently, if a physical loss is triggered by a digital act, the property policy is often rendered void by a “cyber exclusion” clause. This creates a scenario where a business can be “fully insured” on paper but find itself with zero coverage when a digital intrusion leads to a physical catastrophe. This mutual exclusion between cyber and property forms represents the £650 million gap that Lockton is warning against, as many large-scale operators are currently operating without an affirmative insurance solution for this specific intersection of risks.
Evolution of Exclusions: From Silent Cyber to Affirmative Language
For several years, the insurance industry dealt with the phenomenon of “silent cyber,” where policies did not explicitly mention digital risks, leading to protracted legal battles over whether coverage existed by default. In the current market, however, this ambiguity has been replaced by “affirmative exclusion.” Insurers have meticulously rewritten their contracts to ensure they are not responsible for the overlap between digital triggers and physical consequences unless a specific endorsement or standalone policy is purchased. This shift has significant implications for corporate boards, as it moves the burden of proof and the responsibility for gap identification squarely onto the shoulders of the insured. Without a proactive effort to bridge these silos, companies are effectively gambling that their digital and physical worlds will never collide in a malicious way.
This transition to affirmative exclusion has made it increasingly difficult for risk managers to argue for coverage after an incident has occurred. The legal language is now so precise that unless a policy specifically mentions “physical damage resulting from a digital act,” the insurer has a very strong case for denying the claim. This reality has necessitated the emergence of specialized “blended” products that Lockton highlights, which are designed to sit between the cyber and property towers. However, the adoption of these products remains low compared to the growing threat profile. Many organizations continue to view cyber and property as two distinct departments that do not need to share a common risk framework, a perspective that the French refrigeration attack has proven to be fundamentally flawed in a connected industrial environment.
Synthesizing Modern Market Realities
The Escalating Scale and Velocity of Loss
The shift from data-focused cyberattacks to physical sabotage represents a new frontier in global risk. Any enterprise that relies on connected industrial controls, such as automated warehouses, manufacturing assembly lines, or advanced HVAC systems, is now a high-priority target for cyber-physical exploitation. The primary differentiator between these attacks and traditional IT breaches is the “velocity” of the resulting loss. While a data leak can be devastating, its effects are often spread out over months of legal and regulatory scrutiny. In contrast, an attack on Operational Technology can cause the immediate and irreversible destruction of massive amounts of physical inventory or critical infrastructure in a matter of hours. This high-speed damage leaves almost no time for a coordinated response, making pre-incident risk transfer through appropriate insurance even more vital.
One of the most significant barriers to addressing this risk is the organizational fragmentation found in many large corporations. Facilities teams, who manage the physical machinery, often have little interaction with the IT security teams responsible for protecting the network. Similarly, the risk management department may buy insurance in silos, without fully understanding how a vulnerability in the HVAC system could bypass the firewall and lead to a multimillion-pound property claim. This lack of coordination creates “blind spots” where critical systems are connected to the open internet with inadequate security, yet they are also excluded from the company’s property insurance because the threat is digital. Bridging this internal gap is the first step toward accurately quantifying the financial exposure and justifying the investment in specialized cyber-physical insurance coverage.
Market Solutions: Specialist Coverage and the Adoption Problem
Lockton has highlighted that while the protection gap is substantial, the insurance market has developed sophisticated tools to mitigate this exposure. Specialist “cyber-property and spoilage” products are now available with limits as high as £650 million, providing a comprehensive safety net that explicitly covers physical damage and business interruption resulting from a digital intrusion. These products are designed to be “affirmative,” meaning they use clear, unambiguous language to guarantee that the intersection of digital cause and physical effect is covered. For industries like food and beverage, pharmaceuticals, and high-tech manufacturing, these specialized policies provide the only way to ensure that a malicious hack does not result in an unrecoverable financial disaster.
Despite the clear benefits of these integrated solutions, market uptake has been surprisingly low, largely due to a combination of cost and a lack of awareness. Many companies are hesitant to pay the additional premiums required for affirmative cyber-physical coverage, often under the mistaken belief that their existing property or cyber policies will provide “enough” protection. There is also a prevailing sentiment that these types of attacks are “black swan” events that are unlikely to happen to them, despite the growing number of documented incidents in the retail and industrial sectors. This hesitation creates a systemic risk across entire industries, as a single large-scale event could lead to widespread insolvency if businesses are unable to recover their losses through traditional insurance channels.
Strategic Responses and Future-Proofing Operations
Security Hygiene: A Prerequisite for Insurance Payouts
As the market for cyber-physical insurance matures, underwriters are becoming significantly more rigorous in their evaluation of a company’s “security hygiene.” Organizations can no longer expect to secure high-limit coverage without demonstrating a robust defense strategy for their Operational Technology. This includes strict protocols for patch management, the use of multi-factor authentication for remote access to industrial controls, and the elimination of default passwords on IoT devices. Insurers like Tokio Marine Kiln have indicated that while a security failure might not automatically lead to a claim denial, the quality of a company’s security posture will directly influence the premiums, limits, and terms of their policy. In some cases, a total lack of OT security could make a company essentially uninsurable for physical-digital risks.
This shift in underwriting focus is transforming the role of the insurance broker from a transactional intermediary into a strategic risk educator. Brokers are now tasked with helping clients “stress-test” their operations against specific physical-loss scenarios. By conducting detailed audits of how digital systems interact with physical assets, brokers can help companies identify where their greatest exposures lie and implement the necessary technical controls to satisfy the requirements of modern underwriters. This proactive approach not only helps in securing better insurance terms but also strengthens the overall resilience of the business. The goal is to move away from a “check-the-box” mentality regarding cybersecurity and toward a holistic understanding of how digital vulnerabilities can impact the physical stability of the entire enterprise.
Actionable Frameworks: Bridging the Protection Gap
The path toward securing a modern enterprise against cyber-physical threats involved a total reassessment of how risk was quantified and transferred. Successful organizations moved beyond siloed thinking by creating cross-functional teams that integrated IT, facilities management, and corporate risk departments. These teams worked to map every intersection between digital networks and physical hardware, identifying critical points of failure where a hack could lead to spoilage or destruction. By performing detailed financial modeling of a 24-hour total loss of physical inventory, these companies were able to clearly demonstrate the potential “balance-sheet impact” to their boards of directors. This data-driven approach allowed them to justify the purchase of specialized insurance limits that reached the necessary £650 million threshold.
The industry as a whole shifted toward a more standardized language for cyber-physical risks, reducing the legal ambiguity that once plagued the sector. Regulators also played a key role by mandating minimum security standards for OT equipment used in critical supply chains, such as food distribution and healthcare. These actions created a more transparent market where businesses and insurers had a shared understanding of where one policy ended and another began. Ultimately, the lessons learned from the French supermarket breach provided the blueprint for a more resilient global economy. The organizations that thrived were those that recognized that in a hyper-connected world, the distinction between digital and physical damage was a relic of the past, and they adjusted their insurance strategies accordingly to prevent a single intrusion from becoming a catastrophic failure.
