Munich Re expands cyber insurance portfolio with USD 575 million acquisition of At-Bay

Munich Re Group has agreed to acquire US-based cyber insurtech firm At-Bay for an enterprise value of $575 million. The deal consolidates At-Bay's automated threat monitoring platform under Munich Re's Specialty arm, HSB, expanding the group's cybersecurity risk management capabilities in the small and medium-sized enterprise market.

Munich Re Group has entered into a definitive agreement to acquire US-based insurtech company At-Bay for an enterprise value of $575 million, according to corporate disclosures. The acquisition is scheduled to complete in the first quarter of 2027, subject to standard closing conditions and regulatory approvals. Following the transaction, At-Bay will operate under the oversight of HSB, the technology-focused underwriting arm within Munich Re Specialty. Munich Re is a Munich-headquartered global reinsurance and specialty insurance group, while At-Bay is a cyber insurance platform providing automated security monitoring and risk mitigation tools for commercial policyholders across the United States and Israel.

The deal formalizes a long-standing strategic relationship between the companies, as HSB served as a primary underwriting partner since At-Bay was founded in 2017. Under this partnership, At-Bay expanded its business volume to achieve $278 million in gross written premiums, becoming a leading provider in the US cyber insurance segment. Acquiring full operational ownership enables Munich Re to directly embed At-Bay's proprietary security architecture into its broader commercial underwriting workflows. The platform continuously scans insured network environments to identify active vulnerabilities, allowing underwriters to mitigate digital risks before claims materialize while refining actuarial pricing models using real-time threat data.

The transaction highlights an ongoing structural shift across the global cyber insurance sector away from traditional, standalone indemnity policies toward integrated active protection platforms. Small and medium-sized enterprises frequently lack dedicated internal security operations teams, creating significant exposure to ransomware, business email compromise, and network breaches. By combining risk transfer with real-time cybersecurity monitoring, primary insurers can systematically lower loss ratios across high-density SME commercial portfolios. Concurrently, regulatory authorities and industry standards bodies are placing stricter expectations on enterprise supply chain risk, accelerating corporate demand for continuous vulnerability management.

From a strategic and market perspective, the acquisition strengthens Munich Re’s competitive positioning in North America's rapidly growing cyber insurance market. Integrating automated security tools directly into specialty insurance products provides commercial brokers and business policyholders with a single platform for risk assessment, threat monitoring, and financial protection. For global commercial insurers and reinsurers, the merger underscores the strategic necessity of acquiring proprietary software capabilities to remain competitive against technology-native managing general agents in digital risk underwriting.