Intersys – SharePoint Breach Exposes Insurers’ Own Cyber Vulnerabilities

The SharePoint cyberattack Intersys is warning about has escalated into a global security crisis. According to Intersys, Microsoft’s on-prem SharePoint vulnerability allowed attackers to embed persistent threats before patches could be applied. This state-linked breach affects over 100 organizations, including U.S. and European government agencies, reigniting debate on cyber risk frameworks.

Matthew Geyman, Managing Director at Intersys, commented:

“What began as a critical software vulnerability in Microsoft’s widely deployed on-premises SharePoint server has reportedly rapidly escalated into a sprawling security crisis. At least 100 organisations – including U.S. state entities, industrial manufacturers, and government agencies in Germany and the U.K. – have already been compromised, with attackers believed to have deployed persistent access tools before patches were applied.

Too many insurers still believe that tight perimeter controls and on-prem hosting equal security. This breach proves otherwise. SharePoint was built for collaboration. Putting it behind a firewall doesn’t make it safer; it just makes breaches harder to detect.

At Intersys, we’ve long said: it’s not if you’ll be breached, it’s when. The real test is how quickly you detect, respond, and contain the threat. Cloud-based systems give you the scale, visibility, and speed needed for that. Insurers offering cyber cover can’t afford to get this wrong internally; it’s a credibility issue as much as a risk one.”

With the SharePoint cyberattack Intersys commentary, the incident becomes a wake-up call for insurers and enterprises alike to adopt faster detection and response models.