UK's Pen Underwriting Doubles SME Cyber Cover to £10 Million as Demand Surges

The UK cyber insurance market is expanding rapidly to meet escalating demand from mid-market businesses, and Pen Underwriting — one of the UK's larger managing general agents (MGAs) — is doubling down. Effective July 1, 2026, Pen Underwriting will double its cyber cover limit to £10 million ($13.3 million) for small and medium-sized enterprises with revenue of up to £600 million. The move significantly increases the protection available to a segment of the economy that has historically been underinsured against digital threats.

The expansion reflects a broader industry recognition that cyber risk has evolved from a niche concern into a core, fast-growing segment of the property and casualty market. Companies of all sizes are increasingly vulnerable to ransomware attacks, data breaches, business email compromise, and emerging threats such as deepfake-enabled fraud and supply-chain cyber incidents that can affect many victims simultaneously. For SMEs in particular, a single cyberattack can be financially devastating, yet many carry inadequate coverage or share policy limits with numerous other customers in aggregated structures — a vulnerability that some industry executives warn creates a false sense of security.

The urgency is underscored by industry leaders. USAA chief executive Juan Andrade recently called cyberattacks 'one of the most existentialist threats' facing the insurance industry, noting that his company blocked eight billion intrusion attempts in the prior year as artificial intelligence gives adversaries powerful new tools to find vulnerabilities. AI is reshaping the threat landscape on both sides — increasing the sophistication of attacks while also enabling insurers to build more precise underwriting models.

Pen Underwriting's move fits within a global cyber insurance market that Munich Re estimates reached roughly $15 billion in premiums in 2025, with projected annual growth exceeding 10% through 2030. In the UK specifically, insurtech innovation is accelerating: firms are deploying AI agents for claims handling designed to comply with the EU AI Act's human-oversight requirements, while carriers expand capacity and refine policy terms. For UK SMEs, the doubling of available cover represents a meaningful improvement in the financial protection they can secure against an increasingly dangerous cyber environment.