THE ESSENTIALS
Before you start
- Mitigating a threat and paying a ransom are different expenses.
- A benefit called extortion can exclude ransom.
- Insurance assessment does not replace competent incident response.
Read the example through to its exclusion
The Proteção Empresas Cyber offer presented by Santander describes certain reasonable extortion-threat mitigation costs subject to prior MAPFRE Santander authorisation, while expressly excluding ransom demands. This is that product's condition; it cannot be generalised to every cyber policy.
Make two comparison columns
Clara draws two columns in her notebook. Rui puts response services and expenses in one: technical assessment, system protection, recovery and follow-up, where provided. The other records the attacker’s demand. For each item he asks which clause applies, who may authorise expenses, which providers are permitted and what limit applies.
Mark unresolved points. An assistance benefit does not necessarily provide cash or permit unrestricted choice of provider. During a preventive review, ask for the urgent procedure to be explained to whoever might receive the first alert.
An extortion message does not establish the loss
Fictional example: a business receives a note demanding €20,000. That amount describes a demand, not an accepted cost or insurance payment. Separate what appeared on screen, affected systems and technically established facts, without exposing credentials or customer data.
For a real incident, activate the planned response process and contact channel with competent professionals and authorities where applicable. Any decision about a demand raises separate legal and security issues; this article does not recommend payment or negotiation.
Turn the question into a useful quote
When preparing a cyber insurance quote with RMACHADO, describe how the business depends on its systems and the support you wish to assess. Ask expressly about ransom treatment and mitigation services. Use aggregated information initially; sensitive details belong only in the appropriate response channel.
KEEP THESE QUESTIONS
Your checklist for the next conversation
- Separate a ransom demand from response costs.
- Locate exclusions and prior-authorisation requirements.
- Check providers, limits and urgent procedure.
- Avoid exposing credentials or customer data.
FROM THE ARTICLE TO YOUR SITUATION
Let us discuss your situation
Tell us what you want to protect. We review your request and help compare relevant terms. Requesting a quotation does not activate insurance.
Sources and transparency
Content updated on .
Consultation dates are stated in individual references when available.
Numerical examples are fictional and explain concepts. Editorial interpretations are identified in the text.
Information from RMACHADO GROUP. This is not an insurance offer or individual advice. Covers, acceptance, exclusions, sums insured and costs depend on the policy. The intermediary does not underwrite the risks.