If they can't pay out in a case like this, they shouldn't be in business. I hope the affected insureds sue this scumbag insurance company into the bankruptcy it deserves. And if the whole cyber attack insurance industry goes belly up, it sounds like a win for society: maybe these other idiot companies will start to take security seriously rather than just trying to collect money for their insurance companies.