Aviva has overhauled its cyber insurance products, expanding cover and appetite as AI-enabled attacks and SME exposure push cyber to the top of brokers' concern lists. The refresh of Cyber Complete and Cyber Respond modernises wordings, clarifies cover for deepfakes and digital impersonation, and strengthens business interruption protection - all landing in a UK cyber market where rates are softening yet claims severity is climbing.
Smarter cover for AI-driven crime
The updated Cyber Complete policy, aimed at small and mid-market organisations, now includes direct wording on AI-driven attacks. Reputational protection is standard, covering coordinated deepfake takedown, restoration of public records after identity fraud, and round-the-clock specialist support. The kind of impersonation attacks that are increasingly enabled by Generative AI & LLM technology.
Crime cover expands to include cyber-enabled financial losses - such as theft of client funds and social engineering scams - under a refreshed Cyber Crime definition. Aviva removed several outdated exclusions and simplified client requirements, making the product easier to quote and bind.
Business interruption built for supply chain reality
Business interruption cover now reflects the real causes of disruption, whether a direct attack or a third-party failure. The policy runs on a Time Franchise basis, so cover backdates to the start of an incident once the waiting period is met. Interim payments support cash flow during recovery.
Additional cover is available for supply chain dependencies, including system failure at outsourced service providers. That adjustment matches recent UK incident data showing many breaches begin with third parties rather than the victim's own infrastructure.
Closing the SME protection gap
Cyber Respond, the product for smaller and micro-enterprises, now covers corporate identity fraud and telephone hacking. Both Cyber Respond and Cyber Complete are written on an Any One Claim basis, with the full limit applying to each claim and a single excess for the policy period. Crisis management support remains available 24/7 without triggering the excess.
The changes arrive as UK cyber insurance penetration among SMEs sits below 10%, according to S&P Global Ratings. GlobalData's 2025 UK SME Insurance Survey found 60.8% of SMEs hold no cyber cover, often because they believe they are unlikely targets. Brokers see the line differently: 53.6% expect cyber to record the strongest growth of any product, per GlobalData's broker survey.
That belief is backed by hard numbers. The government's Cyber Security Breaches Survey 2025/2026 found 43% of UK businesses were breached or attacked in the last 12 months, and breaches resulting in lost revenue or share value more than doubled year on year. Phishing remained the most common breach type, affecting 38% of businesses.
DUAL has warned the UK market is in "late-stage softening," with rates falling even as claims severity climbs. Expanding appetite and limits rather than competing solely on price is one way carriers can pursue growth without adding to the downward pressure. The British Insurance Brokers' Association made SME cyber education a priority in its 2026 manifesto, with chief executive Graeme Trudgill highlighting supply chain risk and low SME uptake as urgent issues.
"Cyber risk is a real concern for businesses of all sizes," Aviva head of cyber and technology Richard Taylor said. "Our updates are designed to give our clients confidence that in the event of an incident, they'll be supported by wide-ranging and repeated protection, and a team that understands the risks of today."
Why this matters for insurance professionals
SME clients have repeatedly told researchers they don't think they will be targeted, while government data shows nearly half of businesses suffered a breach in a single year. That disconnect explains why brokers see cyber as their standout growth line. Aviva's simplified wordings and broadened appetite - combined with a market moving into first-time-buyer territory - create a clear opportunity to close the protection gap. For brokers, the ability to explain how a policy now covers AI-driven fraud, supply chain outages, and reputational damage, while providing 24/7 crisis support without the excess, can convert a difficult conversation into a straightforward one. Resources that keep advisers up to date on the intersection of technology and coverage, such as AI for Insurance, can help professionals stay sharp as the threat environment shifts.
Your membership also unlocks:
