THE $6.872B BREACH
In February 2024, a ransomware attack on Change Healthcare — a UnitedHealth Group subsidiary — became the largest confirmed cyber loss in U.S. history. The breach traced back to a server without multi-factor authentication (MFA); UnitedHealth Group paid $22M in ransom for the stolen data.
THE $7.87B PREDICTION
On 4/17/23 — 10 months before the breach — ArxNimbus profiled UnitedHealth Group for a cyber insurance analysis. Using a NIST-approved actuarial methodology, the model projected $7.87B in loss exposure, without knowledge of the attack to come.
THE PROOF
The Healthcare Financial Management Association now puts the total confirmed loss at $6.872B — within 8% of Thrivaca™'s $7.87B projection, made 310 days before the breach was even confirmed.
SITUATION
A $500M diagnostic services provider had implemented a series of conventional cybersecurity protections but was still uncertain of its risk. The board, CEO, and CFO were unable to see where they stood on eliminating risk, how much to spend, and how much of the journey remained.
SOLUTION
The company brought in its MSP, who worked with ArxNimbus to implement a recurring risk profile. Utilizing company financials, historical losses, and actuarial models, the company and its leadership were able to see the total risk posture and the value of potential strategies and options.
IMPACT
Over time, the organization eliminated 97% of its quantified cyber risk — a 40% cut within the first year alone, against $14M in previously unresolved exposure.
In the very next annual review, the CEO observed, "We've gained tremendous comfort from finally getting past nearly all of our cyber risk."
SITUATION
A top-10 domestic commercial lender — a $2.8B institution with 23,000 employees — had been tracking digital risk through an opinion-driven risk register in place since 2015. Despite a dedicated $24M cybersecurity budget, the lender had no financial valuation of its total digital risk, no way to measure whether its investments were working, and no framework for prioritizing which threats mattered most.
SOLUTION
The lender deployed the Thrivaca™ Engine enterprise-wide. ArxNimbus established a baseline risk profile T-score™ — the lender's first real, quantified valuation of its digital risk, expressed in dollars instead of opinions.
IMPACT
The real number was 5x larger than expected:
-
internal estimates put digital risk at $75M;
-
Thrivaca™ measured it at $381M. With risk tolerance finally defined and mitigation prioritized by dollar impact, the lender cut cyber risk carrying costs by 8.2% — recovering $25M in year one.
SITUATION
A $1.46B non-profit health system was spending just 0.10% of revenue on cybersecurity — far below the 0.40–0.64% industry benchmark.
Despite achieving a 74% remediation rate with a skeleton crew of just 4 security professionals, the organization was carrying $386.8 million in digital risk exposure it couldn't fully see or fund.
SOLUTION
ArxNimbus built a baseline risk profile from 47,000 threat-vulnerability pairings, then modeled seven digital-twin scenarios — from budget and staffing increases to hardware and cloud migration — giving leadership a clear, dollar-ranked view of which investments would cut the most risk per dollar spent.
IMPACT
- Rapid Reduction: Within six months, digital risk exposure fell 27% — roughly $27 million — against the original baseline.
- Smarter Investment: The board tripled the cybersecurity budget and doubled security staff, moving spend toward industry-benchmark levels almost immediately.
- Stronger Protection: Commercial insurance coverage doubled immediately, with a plan to reach 4x within three years.
SITUATION
Ensono, a leading cloud services provider, had spent $250,000 on a consulting firm for a cyber risk assessment but received imbalanced results mixing subjective and objective data, leaving the company with unclear risk insights.
SOLUTION
By switching to ArxNimbus' Thrivaca™ digital exposure management platform, Ensono gained real-time, data-driven insights into its cyber risks, providing a transparent view of its threat landscape.
IMPACT
- Rapid Results: Within days, Thrivaca provided actionable intelligence, a stark contrast to the prolonged results of the previous assessment.
- Informed Decision-Making: The platform's comprehensive risk data enabled Ensono to take targeted, effective action.
- Cost Efficiency: Thrivaca's immediate insights potentially saved Ensono the $250,000 consulting fee it had previously spent.
TESTIMONIALS
What clients and industry say
"ArxNimbus is the only one we’ve seen that brings things to a proper financial valuation."
“The ArxNimbus technology provides the quantitive risk results we expect - a very useful effort indeed.”
“The method ArxNimbus uses for quantifying the effects across NIST 800-53 categories is quite savvy.”
FOLLOW THE CONVERSATION
Financial exposure is outpacing the traditional blog cycle.
Follow ArxNimbus on LinkedIn →
for new perspectives on CTEM, cyber and AI exposure, financial risk intelligence, and what these shifts mean for business leaders, EBITDA, and ROI.