small accounting firm (8 employees) hit with ransomware in march - paid $47k to recover client data. travelers cyber policy has $250k limit but theyre invoking the "act of war" exclusion because the ransomware variant has alleged russian nation-state attribution. they want to apply a $10k sublimit instead of the $250k policy limit. how do i fight an attribution-based war-exclusion denial on a commercial cyber claim?
this is unbelievable. small firm, paid the premium for years, finally had the kind of incident that the policy is supposed to cover, and now the carrier is doing acrobatics to avoid paying. need help...