The outage of Revolut on October 20 left customers and businesses without payments for hours. Meanwhile, only 25% of Spanish SMEs have cyber insurance.
The global outage of Revolut on October 20, caused by a power cut at a Google Cloud data centre in London, prevented card payments and transfers for several hours. This is reported by larazon.es, which cites the incident as an example of the risk of relying on external providers.
According to the consultancy Qaracter, in data published in March 2026, 75% of large companies have a cyber insurance policy, compared to 25% of SMEs. The report Inside the 2026 SMB Threat Landscape, from Kaspersky with data from 18 countries, reveals that 86% of Spanish SMEs with between 100 and 499 employees experienced some incident in the past year.
An SME has the same exposure as a large company but many fewer resources to recover.
This is explained by José Manuel Sánchez Trallero, director of Master Mutua. The Cyber Preparedness Report 2026 from Hiscox, published in September, indicates that 38% of Spanish companies suffered at least one successful cyberattack in the past year.
The National Cybersecurity Institute (Incibe) managed 122,223 incidents in Spain in 2025, a 26% increase from 2024, and detected 237,028 vulnerable systems. Miguel Ortega Haro, director of Processes and Security at cdmon, recommends segmenting the network and limiting access and privileges for each user.
Having a policy does not guarantee that any interruption will be covered. Some policies pay for loss of profits after a cyberattack, but may exclude system failures or incidents originating from external providers.
When purchasing cyber insurance, it is advisable to check that it covers business interruption, even when the failure comes from a provider.
The Spanish cyber insurance market remains small. Its premiums reached 190 million euros in 2024, a 12% increase from the previous year, according to the Annual Study by Aon on Cybersecurity and Cyber Risk Management, published in July 2025.
You may also like
