USAA CEO Calls Cyberattacks an 'Existential Threat' as Insurer Blocks 8 Billion Intrusions

The escalating cyber threat landscape took center stage in the insurance industry this week, with one of America's largest insurers issuing a stark warning about the scale of the danger. USAA chief executive officer Juan Andrade called cyberattacks 'one of the most existentialist threats' facing the industry today, revealing that his company blocked eight billion intrusion attempts over the past year — a figure that underscores the relentless and growing nature of cyber risk as artificial intelligence gives adversaries powerful new tools to identify and exploit vulnerabilities.

The warning crystallizes a tension at the heart of the rapidly growing cyber insurance market: the same AI technologies driving demand for coverage are simultaneously making attacks more sophisticated and frequent. This dynamic is reshaping how insurers approach underwriting, pricing, and risk aggregation in the cyber line.

A particularly acute concern is the structure of cyber coverage itself. According to Trium CEO Josh Ladeau, enterprise clients that require their vendors to carry cyber insurance are often relying on policy limits that are shared among dozens of other customers — a structure that creates a false sense of financial security and can break down in aggregated loss events, where a single incident triggers simultaneous claims across many policyholders sharing the same coverage. This aggregation risk is the defining underwriting challenge of the cyber market, echoing concerns raised by regulators including Germany's BaFin, which has flagged systemic accumulation risk as its primary cyber insurance supervisory focus.

The industry is responding with innovation and expansion. Insurtech firms are deploying AI on the defensive side: EIP has built a voice-led AI agent called 'Ella' to handle insurance claims in a manner compliant with the EU AI Act's human-oversight requirements, while Sixfold is launching an 'AI Underwriter' that learns an individual carrier's risk appetite. On the capacity side, MGA Pen Underwriting announced it will double its UK cyber cover limit to £10 million ($13.3 million) for small and medium-sized enterprises with revenue up to £600 million from July 1, 2026. The developments reflect a market expanding rapidly to meet surging demand while wrestling with the fundamental challenge of insuring a risk that is correlated, evolving, and increasingly weaponized by AI.