Directors and officers liability: How cyber security and AI are shaping board insurance policies

From ransomware to AI missteps, boards are navigating an unprecedented surge in liability exposure

The directors and officers (D&O) liability insurance landscape in the US is shifting rapidly in early 2026 as emerging threats like cyber‑security incidents and AI risks reshape litigation patterns, underwriting practices and coverage disputes.

As boards confront expanded liabilities and insurers adjust to complex exposures, the traditional features of D&O coverage are under pressure from technology, litigation trends and changing regulatory expectations.

One of the most definitive recent developments highlighting the importance of precise policy language came from the Delaware Supreme Court. On January27,2026, the court affirmed coverage for a $28mn settlement in a securities class action involving HarmanInternationalIndustries, overturning a D&O insurer’s attempt to use a so‑called ‘bump‑up’ exclusion to avoid paying the claim.

The court found that the settlement did not ‘effectively increase’ the merger consideration and therefore was not excluded under the policy’s terms, reinforcing the significance of detailed policy drafting and insurer burden of proof in coverage disputes.

At the same time, the volume and nature of exposures facing boards have broadened. Recent industry insight reports and panel discussions highlight cyber‑security and AI‑related governance and litigation risks as core drivers of change across the D&O space. Panelists at the Professional Liability Underwriting Society’s D&O Symposium in New York said that cyber‑security incidents increasingly spill into D&O claims as data breaches and ransomware attacks draw shareholder suits and regulatory scrutiny.

Additionally, AI adoption, while often framed as an operational advantage, is also creating governance and litigation issues for companies whose boards have yet to integrate AI oversight into risk and compliance frameworks.

These technological risk drivers align with broader risk analyses placing cyber‑security incidents and AI among the top business concerns for 2026. Industry barometers, like a recent report from Allianz, have shown cyber‑security consistently as the most significant worry for firms globally, with AI rising rapidly in risk rankings as both a source of opportunity and potential liability.

The spillover of cyber incidents into D&O claims reflects the changing nature of board accountability. Directors can face liability not only for alleged financial mismanagement but also for failures in overseeing cyber‑security strategies and controls, particularly if breaches lead to shareholder losses or regulatory enforcement actions. Broader D&O market research also highlights how evolving governance expectations and digital risk vectors, like shadow AI and cloud dependency, complicate underwriting and claims assessment.

Compounding these technology‑linked risks are geopolitical and macroeconomic pressures. Data from market commentators indicate that tariffs, geopolitical risk and AI deployment feature among the top D&O liability exposures for 2026.

Litigation trends are adapting accordingly. Although securities class actions eased slightly in 2025, the nature of claims has shifted, with cyber‑security and technology failures contributing to rising average settlement costs and broader exposures, prompting insurers to examine cooperation and confidentiality issues more closely in policy performance. According to a commentary piece by Reuters, insurers increasingly seek potentially sensitive internal information under cooperation clauses, raising concerns about preserving attorney‑client privileges while responding to claims.

The market response also reflects underwriting adaptation. Insurers and brokers are demanding stronger evidence of cyber‑security and technology risk management, which often tie premium pricing or coverage terms to the existence of robust enterprise risk controls. Industry data suggests that the integration of governance frameworks for AI and cyber‑security into board practices can influence underwriting outcomes, though many companies lag in implementing structured oversight regimes.

Looking ahead, directors and officers will increasingly need to balance proactive governance with reactive legal defense strategies. Boards that invest in cyber‑security oversight and AI governance may be better positioned to manage both enterprise risk and the nuances of D&O coverage. At the same time, insurers will likely continue refining policy language and underwriting practices to account for new sources of loss while protecting against ambiguous exposures.

Regulatory & Compliance
WordPress website theme by whoisAndyWhite