The insurance marketplace Lloyd’s of London recently announced that its insurers must create exceptions for devastating, state-backed cyberattacks, a category that includes the illicit operations of North Korea hacking syndicates.

According to Lloyd’s notice announcing the move, nation-state cyberattacks pose a “systemic risk” to the insurance market due to their sheer cost, and insurance and cyber experts have welcomed the move to fortify the fledgling cyber insurance marketplace.

But some researchers voiced concerns to NK Pro that the complexities of attribution could still leave firms hit by North Korean cyberattacks on the hook