Traditional Insurance Leaves Enterprises Exposed as AI Liability Claims Surge

A growing category of AI-native risks — including hallucinations, algorithmic bias and model drift — falls outside the scope of standard insurance policies, according to Gallagher Re report.
By: | March 25, 2026
overseeing AI deployment on servers

Generative AI-related lawsuits in the United States grew 978% from 2021 to 2025, yet the insurance products most enterprises rely on offer only fragmented coverage for the liabilities AI systems create, according to a new report from Gallagher Re.

The report, produced in conjunction with the Massachusetts Institute of Technology and Testudo Global Inc., found that AI-driven losses are materializing through mechanisms that traditional policies were never designed to address — leaving deployers of third-party AI tools shouldering most of the risk.

Cumulative GenAI-related lawsuits in the U.S. climbed past 700 between 2020 and 2025, with year-over-year filing increases accelerating to 137% in 2024-2025 from 59% in 2023-2024, the report said. Patent infringement claims accounted for 11.9% of cases, copyright infringement for 11.2% and personal injury claims — tied to privacy violations and misuse of personal data — for 10.2%, the report said.

Coverage Gaps Across Every Major Policy Line

The report mapped AI-specific risks against cyber, technology errors and omissions, product liability and commercial general liability policies, finding significant gaps in each.

Cyber insurance generally responds when contractual triggers such as ransomware or data breaches are met, regardless of whether AI facilitated the attack. But it typically does not cover bodily injury, intellectual property infringement, defamation, hallucinations leading to financial loss or data disclosure via AI outputs, according to the report.

Technology E&O policies, meanwhile, are designed for vendors and developers who supply AI tools — not for the enterprises deploying them. Product liability may respond when AI controls physical devices such as autonomous vehicles, but purely algorithmic failures causing financial loss or discrimination fall outside its scope, the report found.

Commercial general liability policies face similar constraints, and new ISO exclusions available from January 2026 could remove coverage for personal and advertising injury, bodily injury or property damage arising from generative AI for companies that adopt the exclusionary language.

A separate Gallagher survey of 1,250 companies found that 57% identified AI errors, misinformation and hallucinations as a key risk — the leading concern overall. Legal and reputational risks followed at 56%, and data protection and privacy violations at 55%.

Vendors Shift Risk to Deployers

The report highlighted a structural imbalance in how liability is allocated between AI vendors and the enterprises that use their tools. Courts and regulators are generally treating AI as a tool rather than an independent legal actor, placing responsibility for its outputs on the deploying organization, according to Gallagher Re. Vendor contracts reinforce this dynamic — standard terms typically cap liability at 12 months of fees and offer no performance warranties.

This leaves AI deployers in a difficult position: they lack visibility into how a model was trained yet bear legal responsibility for its outputs. The report noted that strict liability does not generally apply to deployers, but liability can still arise from failures to exercise reasonable care, misleading representations or unmet regulatory obligations.

Standalone AI Products Begin to Fill the Void

Three specialized insurers have developed standalone AI insurance products to address risks that lack a home in existing policies, the report said.

  • Munich Re’s aiSure product provides performance warranties for AI developers and enterprises using internal AI systems.
  • Armilla, backed by Chaucer and Axis Capital, launched in 2025 with coverage requiring ongoing model quality assessments.
  • Testudo launched in January 2026 with a claims-made product targeting middle to large enterprises deploying generative AI, focused on defending against litigation risks such as copyright infringement and bodily injury claims.

Established carriers including Coalition, AXA XL, Hiscox and Beazley are also clarifying coverage boundaries through endorsements and sector-specific products, the report noted.

The insurance market is additionally grappling with accumulation risk. The AI ecosystem’s reliance on a small number of foundation model providers means a critical flaw in one widely adopted model could trigger claims across thousands of unrelated policyholders simultaneously, according to the report. Unlike traditional catastrophe scenarios with geographic or sectoral boundaries, AI failures can propagate instantly across industries and borders.

Obtain the full report here. &

The R&I Editorial Team can be reached at [email protected].

More from Risk & Insurance