Third-party cyber attacks put spotlight on contingent business interruption coverage

A string of high-profile cyber attacks involving third-party software vendors last year has forced organizations to take a hard look at their contingent business interruption (CBI) coverage. 

According to one wholesale broker specializing in cyber, businesses’ vulnerability to third-party outages was exemplified by two events in 2024: the Change Healthcare breach and the CDK Global attack.