Cyber insurance does exist. There are some very large players who do cyber insurance. But the question is, what exactly are you insuring? Are you insuring somebody to get a new identity, and how does that work? What kind of claims would you pay out? What kind of monies would you pay out for a person to get a new identity? How much does it cost or how difficult is it to get a new SIN number in Canada? I don't know.
That product does exist, and those are some of the arguments that fintechs are proposing—that cyber insurance is available and would cover these risks. But what is the cost of a new identity? How do you quantify it?