Update, October 2026: In January 2024 Fidelity National Financial told the SEC that the attacker had deployed malware that is not self-propagating and had exfiltrated data, and that about 1.3 million consumers were potentially affected (Form 8-K/A).
In an era where digital data is as valuable as physical assets, the specter of cyber threats looms large. Two recent incidents at Sabre Insurance and Fidelity National Financial (FNF) have cast a spotlight on attacks against insurers, and on a particularly insidious form of these threats: ransomware.
Sabre Insurance’s Cyber Attack
Sabre Insurance, a UK motor insurer, said on November 22, 2023 that an attacker had tried to gain access to its systems on November 16. The company said its IT security controls worked “promptly and effectively”, that its retained IT security partner helped manage and resolve the attack, and that it did not believe any sensitive customer data had been accessed or that the incident would have a material financial impact.
Fidelity National Financial’s Cyber Attack
Fidelity National Financial, a Fortune 500 title insurance company, reported a cyber attack to the SEC on November 21, 2023. It said an attacker had accessed certain systems and acquired credentials, and that the containment measures it took, including blocking access to some systems, disrupted its title, escrow and mortgage services. On November 22 the BlackCat ransomware group, also known as ALPHV, claimed the attack.
Ransomware: A Persistent Global Threat
The FNF incident, claimed by a ransomware group, underscores the growing reliance on ransomware by cybercriminals. This trend points to a need for a global response, targeting not just the cybercriminals but also the nations and governments that may be tacitly supporting such activities. In the absence of decisive action, the proliferation of malware threats is likely to continue unchecked.
Law Enforcement and Proactive Cybersecurity Measures
While law enforcement agencies play a crucial role in responding to ransomware attacks, their ability to prevent such incidents is often limited. These recent breaches highlight the urgent need for enhanced cybersecurity measures. Businesses and governments must work together to develop proactive strategies. Such collaboration is essential to counter the increasingly sophisticated tactics of cybercriminals in the digital landscape.
In conclusion, the attacks on Sabre Insurance and Fidelity National Financial are stark reminders of the escalating cyber threat landscape. Addressing this challenge requires a multifaceted approach, combining robust cybersecurity practices, international cooperation, and proactive strategies to stay ahead of cybercriminals. As the digital world evolves, so must our defenses against these ever-present digital threats.
Correction, 26 October 2026: this article said Sabre Insurance suffered a ransomware attack with data theft, traced to its IT management firm and suspected to be the work of LockBit or BlackCat, and that Fidelity National Finance confirmed a ransomware attack that encrypted its data; Sabre said its controls contained the attack and it did not believe sensitive customer data had been accessed, the company is Fidelity National Financial, its disruption came from its own containment measures, and the BlackCat (ALPHV) group claimed the FNF attack.