居家大小事，找它有丿步-小工匠家事網
露營老爹 │
設計老爹 │
窩客幫 │
加工網 │
工程網 │
修繕網 │
MIT製造業外貿網 │
MIT新聞網 │
野外生活網 │
清潔服務 │
搬家網 │
租車網 │
維修網 │
學習網 │
愛美網 │
開鎖網 │
好家網 │
掏客網 │
小華陀 │
目前瀏覽人數1872
@959xbrfz
https://youtu.be/4KwsALramtA?si=VG8su7p91H6Rejnr
推薦店家
臺中后里受極宮
屏東湘湖宮-九龍太子陣,屏東九龍太子陣
康立衛生清潔工程-通水管下水道 清排水溝 台北抽水肥 台北洗污水管 桃園洗污水管下水道
緣室 yuan room-身心靈課程,台中身心靈課程,西屯區身心靈課程
蘆洲玄德宮
大翔羽球館-羽球館,台中羽球館,台中羽球場地出租,台中專業羽球館
吾花果物(田綠渼)
八德天山
日發二手餐飲設備收購買賣-二手貨買賣,台中二手貨買賣,台中二手餐飲收購
MB御駕 豪車航空座駕
以利亞精緻搬家公司-桃園搬家吊車,桃園專業搬家吊車,龍潭吊車搬家
順豐小客車租賃有限公司-桃園機場接送,台中機場接送,豐原機場接送,豐原包車旅遊
興興魚翅餐飲有限公司-高雄魚翅年菜,高雄魚翅餐廳,高雄魚翅燕窩餐廳
喵喵城堡
高雄六龜受真宮-玄天上帝廟,高雄玄天上帝廟,六龜玄天上帝廟,
友村國際有限公司
圓成餐飲設備收購-餐飲設備買賣,二手餐飲設備收購,桃園餐飲設備買賣,桃園餐飲設備
維霖資源回收-餐飲設備買賣賣,二手餐飲設備回收,台北二手餐飲設備回收,新北餐飲設備買賣
小工匠快速模組
客戶新選
友站連結
力譽國際法律事務所-律師事務所,民事律師,台北律師事務所,中正區律師事務所
店家文章分享
2026.02 | 本所游淑君律師/民間公證人共同著作發表【數位時代戰爭的重新定義：默克案與資安保險的演變】全國律師2026年2月號｜The Merck Case and Cyber Insurance
2026-03-08
【文章標題】
數位時代戰爭的重新定義：默克案與資安保險的演變
Redefining War in the Digital Age: The Merck Case and the Evolution of Cyber Insurance (Taiwan Bar Journal, 2026)
【全文電子檔連結】
https://www.twba.org.tw/publication/articles/098446a9-7ed9-469e-93b7-ced3d6563fa8
【內容摘要】內容介紹
隨著企業營運高度依賴數位系統與網路服務，網路攻擊所造成的營運中斷、資料外洩與財務損失風險日益增加。為降低此類風險帶來的衝擊，企業逐漸透過投保「資安保險（Cyber Insurance）」作為風險移轉工具。近年來，全球資安保險市場快速成長，企業對於資安風險管理的需求亦持續提升。
然而，當網路攻擊涉及國家或國家支持的行為者時，傳統保險保單中的條款設計往往難以直接適用，並可能引發重大理賠爭議。美國製藥公司默克公司（Merck & Co.）因2017年「NotPetya」網路攻擊所引發的保險訴訟，即為此類爭議的重要案例。
該案件不僅影響資安保險市場的條款設計，也促使法律界重新檢視「戰爭除外條款」（war exclusion）在數位時代的適用範圍。
NotPetya攻擊與默克案爭議
2017年6月爆發的NotPetya惡意軟體攻擊，最初針對烏克蘭政府與企業，但隨後迅速擴散至全球企業，包括航運公司Maersk、物流企業FedEx，以及製藥公司Merck等跨國企業。
在此次攻擊事件中，默克公司約有40,000台電腦系統癱瘓，造成生產與供應鏈中斷，整體損失估計高達14億美元。
默克公司依其投保的財產全險保單（Property All Risks Policy）向多家保險公司提出理賠申請。然而，保險公司以保單中的「敵對或戰爭行為除外條款」（Hostile/Warlike Action Exclusion）為由拒絕理賠，主張NotPetya攻擊係由俄羅斯支持的網路行動，因此屬於國家敵對行為。
對資安保險市場的影響
默克案之後，全球保險市場開始重新檢視資安保險保單條款的設計。
其中，倫敦勞合社（Lloyd’s of London）自2023年起要求市場成員在資安保單中明確規範國家支持網路攻擊的除外條款，並建立攻擊歸因機制，以降低大型網路攻擊造成的系統性風險。
結語: 企業在資安保險上的風險管理考量
默克案揭示了傳統保險條款在面對數位衝突時的侷限性，也促使保險市場重新思考資安保險的條款設計與風險分配方式。
隨著網路攻擊事件日益頻繁且複雜，企業在規劃資安風險管理策略時，除了加強資安防護措施外，亦應審慎評估資安保險保單條款，以確保在重大網路事件發生時能獲得適當的風險保障。
未來，隨著法律實務與保險市場持續演進，資安保險制度亦將逐步建立更清晰的法律框架，以因應數位時代的新型態風險。
Key Takeaways
- Traditional war exclusion clauses may not automatically apply to cyberattacks. Courts may interpret such clauses narrowly if policy language does not explicitly address cyber operations.
- The Merck litigation has become a landmark precedent in cyber insurance law. The case illustrates how ambiguities in insurance policy wording may lead courts to favor policyholders.
- The insurance market is revising cyber policy language. Following the Merck decision, insurers—particularly within the Lloyd’s market—have introduced clearer exclusions for state-backed cyber operations.
- Businesses should carefully review cyber insurance coverage. Companies should ensure that policy terms align with their cyber risk exposure and form part of a broader cyber risk management strategy.
Introduction
As corporate operations increasingly rely on digital systems and online services, the risks of operational disruption, data breaches, and financial losses caused by cyberattacks continue to grow. To mitigate the impact of such risks, companies have increasingly turned to cyber insurance as a risk transfer mechanism. In recent years, the global cyber insurance market has expanded rapidly, reflecting the rising demand among businesses for more robust cyber risk management strategies.
However, when cyberattacks involve nation-states or state-sponsored actors, the provisions of traditional insurance policies are often difficult to apply directly, which may lead to significant coverage disputes. The insurance litigation involving the U.S. pharmaceutical company Merck & Co. arising from the 2017 NotPetya cyberattack represents one of the most notable cases illustrating these issues.
This case has not only influenced the drafting of cyber insurance policy terms but has also prompted the legal community to reexamine the applicability of war exclusion clauses in the digital era.
The NotPetya Attack and the Merck Coverage Dispute
The NotPetya malware attack, which erupted in June 2017, initially targeted Ukrainian government agencies and businesses but quickly spread worldwide, affecting numerous multinational companies, including shipping company Maersk, logistics firm FedEx, and pharmaceutical manufacturer Merck.
As a result of the attack, approximately 40,000 of Merck’s computer systems were rendered inoperable, causing significant disruptions to production and supply chains. The company estimated its total losses at approximately USD 1.4 billion.
Merck subsequently filed insurance claims under its Property All Risks insurance policies. However, several insurers denied coverage based on the policy’s “Hostile or Warlike Action Exclusion”, arguing that the NotPetya attack was a cyber operation supported by Russia and therefore constituted a hostile state action excluded under the policy.
Impact on the Cyber Insurance Market
Following the Merck litigation, the global insurance market began reassessing the drafting of cyber insurance policy provisions.
In particular, Lloyd’s of London introduced new requirements beginning in 2023, mandating that market participants clearly define exclusions for state-backed cyberattacks in cyber insurance policies and establish mechanisms for attributing cyber incidents. These measures aim to reduce the systemic risks posed by large-scale cyber incidents.
These developments reflect a broader effort by insurers to clarify policy wording and reduce uncertainty in cyber coverage disputes.
Conclusion: Risk Management Considerations for Businesses
The Merck case highlights the limitations of traditional insurance policy language when applied to modern digital conflicts and has prompted the insurance market to reconsider how cyber insurance policies allocate risk.
As cyberattacks become increasingly frequent and sophisticated, companies should adopt a comprehensive approach to cyber risk management. In addition to strengthening cybersecurity protections, businesses should carefully review and evaluate cyber insurance policy terms to ensure that adequate coverage is available in the event of major cyber incidents.
Looking ahead, as legal practice and the insurance market continue to evolve, the cyber insurance framework is expected to develop clearer legal standards and contractual structures to address emerging risks in the digital age.
©Debby S.C.Yu, 2025. All rights reserved.
Unauthorized reproduction or distribution of this article, in whole or in part, without prior written permission is strictly prohibited.
#Devote Today, YU LEAD tomorrow.
#力譽專業、信任保障
其它店家文章
2026-04-25
2025-07-25
2025-07-25
2025-07-25
2025-07-25
2025-07-25
2025-06-17
2025-01-03
2024-12-23
服務項目：
法律諮詢,民事訴訟,刑事訴訟,家事訴訟,公證人,公證事務所,公證諮詢,民間公證人,法院公證人,公證代辦,台北市法律諮詢,台北市民事訴訟,台北市刑事訴訟,台北市家事訴訟,台北市公證人,台北市公證事務所,台北市公證諮詢,台北市民間公證人,台北市法院公證人,台北市公證代辦,中正區法律諮詢,中正區民事訴訟,中正區刑事訴訟,中正區家事訴訟,中正區公證人,中正區公證事務所,中正區公證諮詢,中正區民間公證人,中正區法院公證人,中正區公證代辦
特別關鍵字：
律師事務所,台北律師事務所,中正區律師事務所,律師事務所推薦,台北律師事務所推薦,中正區律師事務所推薦,律師,台北律師,中正區律師,律師推薦,台北律師推薦,中正區律師推薦,民事律師,台北民事律師,中正區民事律師
其它相關店家資訊
小工匠家事網-聯絡資訊
付款方式
免責聲明本網站僅提供修繕公司資訊參考平台， 並不涉入其中任何諮詢、交易。本網站對各該修繕公司相關資訊亦不作任何實質或形式上之審查。就本網站中所載一切修繕公司的資訊、文字、照片、圖形 、產權、廣告內容、或其他資料（以下簡稱『內容』），無論其為公開張貼或私下傳送，若有不實或違法情事，均為『內容』提供者之責任，本站概不負責也不承擔任何法律責任
免責聲明本網站僅提供修繕公司資訊參考平台， 並不涉入其中任何諮詢、交易。本網站對各該修繕公司相關資訊亦不作任何實質或形式上之審查。就本網站中所載一切修繕公司的資訊、文字、照片、圖形 、產權、廣告內容、或其他資料（以下簡稱『內容』），無論其為公開張貼或私下傳送，若有不實或違法情事，均為『內容』提供者之責任，本站概不負責也不承擔任何法律責任