German Reinsurance Giant Munich Re Signs Final Agreement to Acquire Cyber Insurance Company At-Bay for $575 Million Enterprise Value
Munich Re plans to acquire At-Bay for $575 million
The German reinsurance giant Munich Re has signed a final agreement to acquire the cyber insurance company At-Bay for an enterprise value of $575 million. The transaction is expected to be completed in the first quarter of 2027, pending regulatory approval and customary closing conditions.
Founded in 2017, At-Bay provides cyber insurance, risk monitoring, and security services to small and medium-sized enterprises in the U.S. After the acquisition, it will be integrated into Munich Re's HSB division, which focuses on technology and cyber risk.
HSB has been a strategic partner of At-Bay since its inception and has supported its growth. At-Bay is currently among the top ten cyber insurers in the U.S., and the acquisition will allow Munich Re to further integrate long-term underwriting collaboration, technical data, and customer distribution within the group.
At-Bay has raised approximately $276 million in total funding, with a valuation of about $1.35 billion in 2021. The $575 million enterprise value represents a decline of about 57% from that round's valuation, reflecting the significant drop in exit prices for cyber insurance tech companies amid high interest rates, underwriting loss pressures, and private equity valuation resets.
The core of the transaction is not merely expanding premium scale but bundling insurance underwriting with proactive risk prevention. At-Bay reduces claims probability by continuously monitoring clients' network exposure, identifying vulnerabilities, and providing security recommendations, while Munich Re offers capital strength, reinsurance capabilities, and underwriting experience.
In market mechanisms, small and medium-sized enterprises are the buyers of cyber insurance and security services, with At-Bay and its underwriting partners assuming risks and collecting premiums. Security monitoring, vulnerability remediation, and risk scoring services improve claims ratios and underwriting profits by reducing incident rates. The transaction is driven by the need for integration of cyber risk loss costs and insurance technology; Munich Re gains risk data, underwriting capacity, and customer access, while At-Bay investors exit at a discount, and independent cyber insurance tech companies face higher capital efficiency and sustainable underwriting profit requirements.
Source: Public Information
ABAB AI Insight
Munich Re's capital path is not the first bet on transforming insurance distribution and underwriting through technology. The group previously acquired digital insurance company Next Insurance, while HSB has long focused on equipment failure, technology risks, and cyber insurance; At-Bay's collaboration with HSB since its founding indicates that this acquisition is closer to internalizing verified channels and underwriting relationships rather than integrating unfamiliar assets from scratch.
When At-Bay was valued at $1.35 billion in 2021, the market was willing to pay high multiples for rapid growth, SaaS-style security services, and cyber insurance premium expansion; however, insurance is not a pure software business and must ultimately undergo scrutiny of claims, reinsurance costs, capital occupation, and cyclical losses. The $575 million transaction price indicates that the capital market has re-anchored its value from a "high-growth insurtech narrative" to a "specialized underwriting technology asset that can improve claims ratios."
This is comparable to the development trajectories of insurtech companies like Lemonade and Root: front-end digitization can reduce customer acquisition and operational costs, but if risk control models cannot withstand extreme loss cycles, scale growth will exacerbate claims issues. The uniqueness of cyber insurance lies in the constantly changing attack methods, vulnerabilities, and ransomware, making historical data's predictive power weak; thus, real-time security monitoring and proactive loss mitigation are closer to core competitiveness than traditional static policy pricing.
Essentially, it is a reconstruction of the industry chain. Traditional insurance assesses and pays claims after incidents occur, while cyber insurance requires insurers to continuously observe clients' technical risks before incidents happen. Risk data, vulnerability scanning, threat response, and underwriting pricing are therefore merged into the same profit pool; groups that can simultaneously possess capital, reinsurance, technical monitoring, and small and medium-sized enterprise distribution capabilities will raise the entry barrier, while cyber insurers that purely rely on low-priced premiums to acquire customers will face dual pressures from loss rates and financing environments.
ABAB News · Cognitive Law
The ultimate goal of insurance is not to pay claims, but to reduce claims.
Software can reduce costs, but risk control can create profits.
High valuations buy growth, low valuations buy cash flow.