Definition:Bricking coverage
🧱 Bricking coverage is a specialized provision within cyber insurance policies that responds when a cyberattack renders physical hardware — servers, computers, industrial control systems, IoT devices, or other electronic equipment — permanently inoperable, effectively turning them into useless "bricks." Unlike standard data restoration or business interruption coverages that address software corruption and downtime, bricking coverage specifically addresses the cost of replacing or repairing hardware that has been irreparably damaged by malicious code, firmware attacks, or destructive malware.
⚙️ The mechanism behind bricking events typically involves malware that overwrites firmware, corrupts BIOS/UEFI systems, or delivers commands that cause physical components to operate beyond safe parameters — such as disabling cooling systems to overheat processors. Notable real-world incidents have demonstrated the plausibility of these attacks: destructive malware campaigns have rendered thousands of machines unusable across targeted organizations in a matter of hours. Within a cyber policy, bricking coverage may appear as a dedicated insuring agreement or as an extension under the first-party section, often subject to a specific sublimit that is lower than the overall policy limit. Underwriters evaluate the exposure by considering the insured's hardware inventory, the age and replaceability of critical systems, and the security controls protecting firmware and privileged access. The coverage typically reimburses the cost of replacement hardware at fair market value, though some forms offer replacement cost valuation.
⚠️ Bricking coverage fills a gap that sits at the intersection of property insurance and cyber insurance — a gap that has generated considerable debate in the market. Traditional property policies often exclude damage caused by cyber events, while standard cyber policies historically focused on data and network-related losses rather than physical asset destruction. As destructive cyberattacks have grown more sophisticated and more frequent, the demand for explicit bricking coverage has increased, particularly among organizations with large hardware estates such as healthcare systems, manufacturers using industrial control systems, and financial institutions. For insurers, pricing bricking coverage requires grappling with aggregation risk: a single widespread malware campaign could brick hardware across many policyholders simultaneously, creating correlated losses that challenge traditional actuarial assumptions built around independent events.
Related concepts: