The attribution problem AI creates for the market
The same AI capabilities accelerating attacks – faster reconnaissance, automated exploitation, harder-to-trace attack chains – also make it harder to quickly attribute an attack to a specific actor. That attribution difficulty is directly relevant to how the Lloyd’s market structures cyber coverage. The LMA’s LMA5567A/B clauses, updated in 2026, shift the exclusion test for state-backed cyberattacks away from attributing an attack to a state and toward whether it caused significant impairment at a national infrastructure level – refining exclusions first introduced in 2022 following the Russia-Ukraine war rather than retreating from writing the class. The wording update reflects a practical recognition that attribution-based exclusion tests become harder to apply as attack speed and obfuscation both increase.