Tokio Marine HCC names cyber underwriting chief as claims severity outpaces pricing

Brian Alva is returning to an organization he helped build. After nearly nine years at NAS Insurance Services, he left to work at Corvus and then Travelers, where he rose to vice president of specialty cyber. Now, Tokio Marine HCC's Cyber & Professional Lines Group has named him chief underwriting officer, bringing with him more than 15 years of experience in cyber and professional liability underwriting, portfolio strategy, product development, and distribution.

The timing of his appointment is not incidental. Tokio Marine HCC acquired NAS in 2019 and later merged it with its existing professional lines operations to form CPLG. Alva is not walking into unfamiliar territory—he is returning to the underwriting operation he knew in its earlier form. In a statement, he framed the move as a homecoming: "I am excited to join CPLG and return to an organization I know well, working alongside a strong team to build on its deep specialty expertise, strengthen broker relationships and deliver thoughtful, sustainable solutions for cyber risk." His new employer echoed that continuity, with executive leadership noting that Alva's combination of technical underwriting depth, market perspective, and proven leadership would help the group bring together underwriting, claims, data, technology, risk services, and distribution to serve brokers and policyholders more effectively.

But Alva is stepping into a market under genuine strain. For roughly three years, cyber insurance pricing had been softening as carriers competed aggressively for business. By 2026, according to Gallagher's Cyber Insurance Market Outlook, that pressure had largely stabilized—most buyers were seeing flat rates, with healthcare as a notable exception still facing single-digit increases driven by elevated claims activity. The stabilization might have suggested relief. Instead, it masks a widening gap between what the market is charging and what claims are actually costing.

The numbers tell the story. Coalition's 2026 Cyber Claims Report found that initial ransomware demands jumped 47 percent year over year in 2025. Even more striking, 86 percent of targeted businesses refused to pay those demands—a record high. Meanwhile, Aon recorded a 38 percent increase in U.S. cyber and technology errors-and-omissions incidents in the same period. The average global ransomware claim had nearly doubled to approximately $713,000. S&P Global Ratings has forecast a 15 to 20 percent premium increase in 2026 specifically because claims severity is now outpacing a market that had priced for a less volatile threat environment.

This is the precise challenge Alva has been hired to navigate. CPLG faces a decision that will define its competitive position: how aggressively to reprice specific segments of its book without losing new business to competitors still chasing growth in a softening market. The group has already begun investing in the infrastructure to support that kind of surgical decision-making. In December 2025, it entered a partnership with risk data platform Cytora aimed at improving underwriting efficiency across its portfolio.

For brokers placing cyber business with CPLG, Alva's background suggests continuity rather than upheaval. His nearly decade-long tenure at NAS, combined with his more recent experience at Corvus and Travelers navigating market volatility, positions him as someone who understands both the organization's history and the current landscape. But continuity does not mean leniency. Carriers with experienced underwriting leaders in place during periods of claims severity outpacing pricing are typically the ones best positioned to reprice or restrict appetite in specific segments proactively rather than waiting for losses to force their hand. For brokers, that means the conversations about renewal terms and segment-specific appetite changes are worth having sooner rather than later.