How Insurers Use Threat Intelligence to Reduce Losses

Ransomware attacks have surged in frequency and severity since 2018, affecting organizations of all sizes. Tokio Marine HCC uses threat intelligence to identify vulnerabilities for potential and existing policyholders before coverage decisions are made.

See Also: On Demand | Ransomware in 2025: Evolving Threats, Exploited Vulnerabilities, and a Unified Defense Strategy

For example, external network scans help reveal what attackers see, and the analysis of stolen credentials from info stealer malware and dark web marketplaces can help monitor for threats, said Jacob Ingerslev, head cyber and tech underwriting, and Alex Bovicelli, senior director cyberthreat intelligence, at Tokio Marine HCC.

The company also evaluates concentrations of cyber risk, and “we can decide to reduce our presence in a given industry on that basis,” Ingerslev said.

Bovicelli pointed out that claims and incident data serve as a feedback loop, confirming whether targeting methods are accurate and revealing overlooked assets that attackers exploited.

In this video interview with Information Security Media Group at Black Hat USA 2025, Ingerslev and Bovicelli discussed:

• How dark kweb intelligence and vulnerability scans inform underwriting decisions;
• Ways that incident data improves detection of high-risk clients and overlooked assets;
• Strategies to help policyholders remediate weaknesses before an attack.

Ingerslev is responsible for the Open Market Cyber and Tech E&O underwriting team and products at Tokio Marine HCC. He has over 20 years of experience in a wide range of underwriting disciplines. Prior to HCC, he was head of U.S. Technology E&O, Cyber and Media Liability at CNA.

As senior director cyberthreat intelligence at Tokio Marine HCC, Bovicelli uses cross-industry information sharing, public-private sector collaboration and critical infrastructure protection to anticipate threats. Bovicelli is highly experienced in creating cyberthreat intelligence programs that drive risk reduction through operational innovations and strategic partnerships.