Munich Re Group agreed on August 19, 2026 to acquire At-Bay, Inc. at an enterprise value of $575 million, and the decisive fact sits in a subordinate clause. Hartford Steam Boiler (HSB), the Munich Re specialty arm that will oversee the business, has been At-Bay’s main strategic partner since the company was founded in 2017 — and, by At-Bay’s own account, its largest capital provider and lead reinsurer. Munich Re is not buying this cyber book. It already carries much of the risk in it.

What $575 million buys is the layer sitting on top of that risk: the underwriting technology, the security platform, the wholesale broker distribution and a rated Excess and Surplus (E&S) carrier. The distinction matters beyond insurance: it puts a public reference price on “InsurSec” — about 2.1 times gross written premiums (GWP) — against which every embedded-insurance and Managing General Agent (MGA) infrastructure platform pitching banks and brokers will be marked. Reinsurers are moving from renting the distribution and data layer to owning it.

What was disclosed, and what was not

Per the Munich Re media release, At-Bay wrote $278 million of GWP as of December 31, 2025 on a US GAAP basis, plus $23 million of cyber fee service revenue disclosed only in a footnote. It employs roughly 280 people across the United States and Israel and ranks as a top-10 US cyber insurer. On combined premium and fee revenue of $301 million, the multiple is 1.9x rather than 2.1x.

This is a signed definitive agreement, not a completed acquisition. Closing is expected in the first quarter of 2027, subject to customary conditions including regulatory approvals.

Three things were not disclosed, and each is load-bearing. At-Bay’s loss ratio. Its profitability. And the figure that actually settles whether $575 million is expensive: what share of that $278 million HSB was already reinsuring, and therefore how much of the “acquired” premium is a round trip inside the Munich Re Group. What happens to the rest of the fronting and reinsurance panel at renewal is equally unsaid.

The 2021 mark nobody mentioned

At-Bay’s own July 27, 2021 announcement closed a $185 million Series D co-led by Icon Ventures and Lightspeed Venture Partners at a post-money valuation of $1.35 billion; a $20 million extension that October took total funding to $292 million. An enterprise value of $575 million is roughly 57% below that mark. Enterprise value and post-money equity valuation are not the same measure, and neither company referenced the 2021 round — but the gap is real, and private insurtech boards will read it first. For contrast, insurtech Ominimo holds a $1.6bn private valuation.

A second unreconciled figure deserves naming. In January 2023 At-Bay said it had surpassed $380 million in annual recurring gross written premium. The 2026 release reports $278 million for full-year 2025. The metrics are not equivalent — a run rate against an accounting-basis annual figure — but no one has bridged them, and that bridge tells a buyer whether 2.1x is cheap.

The panel has not spoken

At-Bay’s capital stack has been rebuilt twice. In May 2022 Trisura Specialty became issuing carrier while HSB remained lead reinsurer, with a Guy Carpenter-placed panel including Skyward Specialty and At-Bay’s own captive retaining a slice of every risk. In August 2023 At-Bay began writing on At-Bay Specialty Insurance Company, the Delaware E&S carrier it had bought from XL Insurance America, rated A- by AM Best. Every one of those counterparties now faces renewal talks with a cedant owned outright by its lead reinsurer. None has commented publicly.

“At-Bay’s market position and unique capabilities make it a perfect addition to our specialty insurance portfolio,” said Mike Kerner, Member of the Board of Management at Munich Re. “We expect the business to evolve into a strong earnings growth driver over time.” Rotem Iram, chief executive and co-founder of At-Bay, who stays with the business, framed it as scale: “With Munich Re, we gain the scale and reach to better address the evolving needs of every small business.”

Munich Re’s own release names no advisers; At-Bay’s version does — Ardea Partners LP as exclusive financial adviser and Cooley LLP as legal adviser to At-Bay, with Sullivan & Cromwell LLP advising Munich Re. Insurance Journal reported neither.

The pattern is now familiar from adjacent verticals: incumbents buying the prevention and data layer instead of licensing it, as with Visa’s $2.4bn agreement for BioCatch, Citi’s purchase of Kard and Cleversoft’s acquisition of FS Assist. Expect other reinsurers backing cyber MGAs through fronting and quota-share arrangements to convert those relationships into ownership rather than re-underwrite capacity each January, because owning the platform removes the ceding commission and captures the fee revenue that reinsurance treaties never touch. The 1.9x-to-2.1x band is the anchor until someone publishes a loss ratio.

Image: aerial view of the Munich Re headquarters by Carsten Steger, licensed under CC BY-SA 4.0, via Wikimedia Commons.