BIG direkt gesund fell victim to a complex cyberattack in which a professional group of perpetrators succeeded in compromising parts of the system landscape. Although an external service provider was able to detect the attack at an early stage and prevent major damage such as data leakage, essential systems had to be shut down as a precautionary measure. Analyzing the incident proved difficult because there was no central SIEM system in place at the time of the attack, which meant that important log data could only be evaluated to a limited extent. At the same time, the existing cyber insurer terminated the contract after massive price increases – a typical effect when insurers perceive an increased risk due to security incidents. As a result, the attack led to a significant strengthening of cybersecurity and a clear roadmap for improving cyber resilience. With the newly gained insights and a transparent presentation of security measures, insurers can once again be approached more successfully – often with better terms and more tailored protection.