Insurance

Kivu is the leading provider of digital forensic services to the cyber insurance industry.

For more than seven years, Kivu has worked with the cyber insurance industry, developing new services, pricing models, and changing the shape of response vendor panels. Our services range from incident response for insurance clients, to tailored pro-active services that decisively reduce the risk of breach. It’s no surprise that Kivu was nominated Advisen’s “Cyber Service Vendor of the Year” and “Cyber Risk Event Response Team of the Year” in 2015, 2016, 2017 and 2018.

We understand that the cyber insurance ecosystem is a balance of value, responsiveness and client service. Kivu is a leader in developing remote response services, which allow breaches to be investigated and mitigated without the delay and expense of needing to put “boots on the ground.” At the same time, Kivu continues to implement innovative pricing models, including the first fixed-price ransomware response service.

Approved by cyber insurance carriers and Managing General Agents

Kivu is on the panel of, or has been pre-approved by, almost every leading cyber insurance carrier and Managing General Agent (MGA). We provide both response and pro-active cyber services to the insured in the US, Canada, Latin America and Europe. We work constantly with claims departments to make sure our engagement process is efficient, transparent, cost effective, and matches policy expectations and coverage.

Kivu’s analysts provide technical insight and subject matter expertise at numerous insurance industry conferences, including: NetDiligence, Advisen, International Association of Privacy Professionals (IAPP), PLUS and RIMS in the US, Canada, and London. We frequently meet privately with our insurance clients, brokers, underwriters and risk managers to discuss the latest threats, provide our objective opinion on current solutions, and help design new policy terms.

Preferred partner, expert legal testimony

Kivu’s responsiveness and value are reflected in the number of insurers that trust us as a preferred partner. Our credibility is reflected in the continual usage of our analysts as experts in insurance coverage litigation and mediation cases. We regularly provide expert opinions on cyber extortion, business interruption, preexisting conditions, and reasonable standards of security.

CryptoLocker Strikes Insurance

A large company had been hit with CryptoLocker, a common and dangerous ransomware Trojan virus that can devastate a business. Alerted to the encrypted files during a routine check, the company’s IT staff called in our investigators, who noticed suspicious Remote Desktop Protocol (“RDP”) logins to their network. Not only did the logins occur in the middle of the night, they were from a location where authorized users were unlikely to be.

Quick Qakbot Takedown

Kivu was engaged to identify, remediate, and investigate a Qakbot infection that could potentially infect more than 8,000 devices connected to the client’s network. The infection had already spread to an unknown number of devices in the client’s environment. Kivu’s goal was to stop the spread of the Qakbot malware, determine the source, and identify the population of infected devices for remediation.

Qakbot is a notorious piece of malware in the banking Trojan family, and it has existed in the wild for several years. The malware was originally designed to steal banking credentials, but newer variants of the malware have been modified to collect keystrokes and stored passwords in browsers, as well as domain accounts on a network.

Blackmail or Bluff?

Following a SQL injection attack on a university, hackers posted a small sample of personally identifiable information and claimed to have stolen the entire database of 150,000+ student records. Using multi-core processing tools to analyze terabytes of webserver logs, Kivu quickly established that the hackers had stolen only the small number of records already revealed, and their attempt to blackmail the university was a bluff. Kivu’s defensible analysis avoided the potential multi-million dollar notification and remediation costs.

Kivu is the leading provider of digital forensic services to the cyber insurance industry.

Approved by cyber insurance carriers and Managing General Agents

Preferred partner, expert legal testimony

Examples of our Work

CryptoLocker Strikes Insurance

Quick Qakbot Takedown

Blackmail or Bluff?

Our Newsletters Will Keep You In The Loop

SERVICES

CLIENT RESOURCES

LEGAL

GET IN TOUCH