Munich Re's reported $575M for At-Bay reprices cyber underwriting, if the deal is real

Reuters reported on August 19 that Munich Re will acquire At-Bay, the cyber insurer founded in 2016 by Rotem Iram and Roman Itskovich, at a $575 million enterprise value, with closing expected in the first quarter of 2027 ^[1][2][12]. Against the $1.35 billion post-money valuation At-Bay announced in July 2021 after its $185 million Series D, co-led by Icon Ventures and Lightspeed Venture Partners, the reported figure is about 57 percent lower, which makes this a repricing of technical cyber underwriting rather than an exit narrative ^[5][17].

Before anyone books that conclusion, note the disclosure gap. Reuters attributed the acquisition terms to Munich Re ^[4], but Munich Re's 2025 annual report listed a 3.68 percent holding in At-Bay at the end of 2025 and still described the relationship as an investment ^[3]. On the reported structure, Munich Re would be buying the remaining 96.32 percent of a company it already sits inside ^[19]. One report, no acquirer announcement, and a close date five or more quarters out is a set of facts that can still move ^[2].

The price also needs reading with care. The 2021 number was a post-money equity valuation set in a venture round; Reuters described the acquisition figure as enterprise value, which accounts for capital structure and cannot establish what shareholders receive absent details on cash, debt and other adjustments ^[7]. At-Bay's last disclosed financing valuation remains the 2021 mark ^[6]. The company later added a $20 million Series D extension and said it had raised $292 million in total ^[9], so the reported enterprise value is roughly twice the capital taken in ^[18]. It is also about 3.6 times the $160 million in annual recurring premium At-Bay reported in 2021, when it said premium was growing 800 percent year over year ^[8][20]. Four-year-old premium disclosure is the wrong denominator for a 2026 valuation, and its absence from the reported terms is the more interesting fact.

The industrial logic is straightforward. Munich Re Ventures led At-Bay's $34 million Series B through its HSB fund in 2020 ^[10], and At-Bay said Munich Re also supplied underwriting capacity ^[11]. At-Bay scans policyholders' external attack surfaces, flags vulnerabilities and feeds that into underwriting and risk management ^[13], later adding incident response, managed detection and response, technology errors and omissions, and professional liability ^[14]. Iram's framing at the 2020 Series B was that "the deck is stacked against small business owners" ^[16]. That approach is no longer differentiated: Travelers completed its acquisition of Corvus Insurance in January 2024, citing Corvus's technology for identifying vulnerabilities throughout the policy period ^[15]. A capacity provider buying its scanning-plus-underwriting partner is consolidation of a proven method, not a bet on an unproven one.

Watch for Munich Re's own filing describing At-Bay as an acquisition rather than a holding, since that is the point at which the terms stop being single-sourced. Watch whether any announcement discloses current annual recurring premium and loss ratios, which is the only way to judge whether $575 million reflects a soft cyber market or At-Bay's specific book ^[1]. And watch the first-quarter 2027 close date: a runway that long leaves room for the consideration to change before money moves ^[2].