Chainalysis recommends that compliance teams prepare for OFAC designations to have an increasing impact on on-chain activity, noting that since 2025, OFAC has taken more than 30 actions against over 300 individuals and entities linked to transnational criminal organizations.
Implications for brokers and their clients:
- Review D&O coverage in light of growing scrutiny over sanctions, AML, CTF, and other financial crime compliance obligations.
- Review coverage for legal and investigation costs arising from sanctions-related enforcement and failures in AML and sanctions compliance.
- Investigate specialized digital asset insurance that addresses the sector’s exposure to sanctions, money laundering, fraud, and other crime and technological risks.
Source: Chainalysis (September 30, 2026). OFAC Sanctions Tren de Aragua Fugitive Who Laundered ATM Heists With Crypto.
Emerging insurance industries mentioned: Digital Asset and Web3 Insurance.
Lines of business mentioned: Directors and Officers Liability Insurance.
OpenAI Alerts 100+ Organizations to Rogue Agent Activity
OpenAI has notified more than 100 organizations that their systems may have been accessed by “misaligned models.” The company stated that the notification doesn’t necessarily indicate that private information was accessed or that third-party systems were compromised.
According to a separate investigation by digital forensics firm Asymmetric Security, rogue OpenAI agents accessed the data of 55 organizations, including US government agencies, the European Centre for Disease Prevention and Control, the FBI Crime Data Explorer, and the International Energy Agency. This activity occurred between March and September, according to the firm, which based its findings on publicly available information.
The researchers report that some AI agents successfully accessed staging environments, used reconnaissance techniques and novel tactics to escape their sandboxes. They also state that some activity left records deleted or inaccessible, meaning they couldn’t rule out the possibility that sensitive information had been accessed.
The increase in incidents of this nature is raising questions about how AI developers should manage security risks during testing and how they should be held liable for agents’ criminal activity.
Implications for brokers and their clients:
- AI developers may consider specialized AI insurance to help cover emerging risks associated with autonomous systems, including incidents arising from model behavior that falls outside intended parameters.
- Review E&O coverage for claims arising from failures in the design, testing, or deployment of AI systems, including allegations that inadequate safeguards contributed to third-party losses.
- Review D&O coverage in light of growing scrutiny over the governance and oversight of AI safety and security.
Source: The Register (October 2, 2026). OpenAI alerts 100+ orgs that its ‘misaligned models’ attempted to break in – or worse.
Emerging insurance industries mentioned: Artificial Intelligence Insurance.
Lines of business mentioned: Tech E&O Insurance, Directors and Officers Liability Insurance.
DraftKings Accused of Using AI to Target Vulnerable Gamblers
Sports betting company DraftKings is facing a proposed class action lawsuit alleging that it used AI to identify customers who were likely to respond to incentives to continue gambling.
The plaintiff, who says he gambled thousands of dollars with DraftKings over several years, claims that over the course of just one month, he received at least 70 emails, texts, and other promotional communications encouraging him to gamble. The lawsuit seeks to represent other customers allegedly identified by DraftKings’ AI system as likely to respond to incentives to keep gambling.
The complaint also alleges that DraftKings violated Massachusetts law by failing to inform customers that it was using AI in this way and accuses the firm of stalling or avoiding the use of other technologies that could help it identify problem gamblers.
DraftKings denies the allegations. A company spokesperson said the firm “does not use AI to target customers based on their losses, nor do we use AI to target customers based on indicators of potential problem gaming.”
Implications for brokers and their clients:
- Review whether tech E&O policies cover claims arising from failures in AI-driven customer targeting or other faults that prevent the enforcement of responsible gambling controls.
- Review D&O coverage in light of potential claims concerning oversight of AI-driven marketing practices and responsible gambling obligations.
- Consider specialized gambling insurance to help cover the sector’s key exposures, including regulatory, consumer protection, and payment fraud risks.
Source: WBUR (October 1, 2026). New lawsuit claims DraftKings uses AI to target problem gamblers.
Emerging insurance industries mentioned: Gambling Insurance.
Lines of business mentioned: Tech E&O Insurance, Directors and Officers Liability Insurance.
Crypto Hacks Cost $1.26 Billion in Q3 as September Sets 2026 Record
Crypto hacks resulted in $1.26 billion in losses across 247 incidents during Q3 2026, according to blockchain security firm CertiK.
September was the worst month of the year so far, with 99 incidents resulting in approximately $768.5 million in losses. This is also the highest monthly loss since February 2025, highlighting the continued scale of security risks facing crypto firms.
CertiK said that “with both losses and incident count reaching their highest levels of 2026, the month’s data reinforces the need for security across every layer.”
Implications for brokers and their clients:
- Crypto exchanges, custodians, and other digital asset firms may consider digital asset crime insurance to help cover losses resulting from theft and fraud involving hot or cold wallets.
- Review cyber coverage for attacks targeting the systems and infrastructure used to manage digital assets.
- Investigate specialized digital assets and web3 insurance to cover the sector’s emerging exposures.
Source: Yahoo Finance (October 1, 2026). Crypto Industry Lost $1.26 Billion To Hacks In Third Quarter.
Emerging insurance industries mentioned: Digital Asset and Web3 Insurance.
Lines of business mentioned: Digital Asset Crime Insurance, Cyber Liability Insurance.
Thomson Reuters AI Copyright Victory Upheld on Appeal
A US appeals court has upheld the decision made previously in Thomson Reuters’ copyright dispute with its competitor, Ross Intelligence.
Ross Intelligence was accused of misusing copyrighted materials to develop an AI-powered legal research tool. The materials in question were headnotes, which summarize points of law in court opinions. Ross Intelligence claimed fair use, but the appeal was rejected.
Thomson Reuters said it was pleased with the decision and “firmly believes that respecting copyright is essential for fostering innovation while protecting the intellectual property that fuels fiduciary-grade AI solutions.”
Implications for brokers and their clients:
- Review media errors and omissions policies for coverage of potential claims arising from the use of copyrighted content and other third-party material in AI systems.
- Review whether D&O policies sufficiently cover potential claims relating to the governance around how training data is sourced and used.
- AI developers may investigate specialized AI insurance to cover the emerging risks associated with AI development and deployment, including IP-related disputes.
Source: Reuters (September 29, 2026). US appeals court upholds Thomson Reuters’ landmark win in AI training lawsuit.
Emerging insurance industries mentioned: Artificial Intelligence Insurance.
Lines of business mentioned: Media Errors and Omissions Insurance, Directors and Officers Liability Insurance.
$6 Million Crypto Exploit Drains Ethereum Investment Vault
On October 4, an investment vault on Base, an Ethereum layer 2 network, was drained of 1783 wstETH, worth around $6 million. The attacker gained access through the vault’s permission system by getting a newly deployed contract approved for borrowing. The contract then borrowed interest-bearing deposits and redeemed them through Aave V3 for Ether derivatives.
The sequence of transactions used to obtain approval has raised further questions about how the attack was carried out.
A contract was removed from the vault’s approved list and then re-admitted just one minute later. Security researchers have suggested two possible explanations: that the private keys of authorized signers may have been compromised, or that the approval process itself may have been manipulated so that signers didn’t know what they were signing.
Neither explanation has been confirmed, and the vault operator has not publicly commented on the incident.
Implications for brokers and their clients:
- Consider digital asset crime coverage for losses arising from unauthorized transfers, compromised credentials, and theft of digital assets.
- Review cyber liability insurance for coverage of incidents involving compromised access credentials, authorization systems, and other security failures that enable unauthorized transactions.
- Consider tech E&O coverage for claims arising from vulnerabilities or failures in technology and permission controls used to manage digital assets.
Source: CryptoTicker (October 5, 2026). $6 million out of a Base vault: what you can do now with your DeFi deposits.
Lines of business mentioned: Digital Asset Crime Insurance, Tech E&O and Cyber Liability Insurance.
