The Defamation Insurance Gap: Why No Commercial Product Protects Small Business Owners from Sustained Online Attack Campaigns

Executive Summary

When a small business owner's premises are damaged by fire, insurance pays for the repair and business interruption costs. When stock is stolen, insurance covers the replacement value. When a customer is injured on the premises, liability insurance covers the claim. These risks — property damage, theft, public liability — are well-understood, actuarially modelled, and commercially insured. The insurance industry has developed products for virtually every identifiable business risk.

With one glaring exception. When a small business owner is subjected to a sustained online defamation campaign that destroys their reputation, contaminates their search results, drives away customers and partners, and generates legal costs that can exceed the value of the business itself — no insurance product exists to help them. Bryan Flowers, the target of Andrew Drummond's 19-article defamation and harassment campaign, has no insurance policy that will fund his legal defence, cover his reputation recovery costs, compensate for his lost business, or provide the financial resources necessary to pursue the civil remedies theoretically available to him.

This paper examines why the insurance gap exists. It analyses the four categories of insurance product that might theoretically provide coverage — D&O liability, media liability, cyber insurance, and general commercial liability — and demonstrates that each contains exclusions, limitations, or structural features that render it inapplicable to victims of online defamation. It then examines the actuarial and commercial barriers that have prevented the development of victim-side defamation coverage, and proposes a framework for a new insurance product category designed to fill this gap.

1. Directors' and Officers' (D&O) Liability Insurance: The Wrong Side of the Claim

D&O liability insurance is the insurance product most commonly associated with defamation in the commercial context. However, D&O policies are designed to protect directors and officers against claims made against them — including defamation claims brought by third parties who allege they have been defamed by the company or its directors. D&O insurance protects the defamer, not the defamed.

A standard D&O policy provides coverage for the costs of defending claims alleging wrongful acts committed in the insured's capacity as a director or officer, including claims for defamation, libel, and slander. If Andrew Drummond were a director of a media company and Bryan Flowers sued him for defamation, Drummond's D&O policy would (subject to its terms) fund his legal defence. Bryan Flowers, as the claimant, would receive no coverage from any D&O policy.

This structural asymmetry is fundamental to D&O insurance. The product is designed to protect corporate decision-makers from the consequences of allegations made against them, not to protect individuals from the consequences of allegations made about them. For a small business owner like Bryan Flowers, who is the target rather than the author of defamatory statements, D&O insurance provides no relevant coverage.

Even if Bryan Flowers held D&O insurance for his role as a director of Night Wish Group or associated companies, the policy would not respond to Drummond's campaign. D&O claims must arise from the insured's wrongful acts in their capacity as a director. Being defamed is not a wrongful act — it is the consequence of someone else's wrongful act. The D&O policy sits on the wrong side of the defamation equation, protecting the party who makes allegations rather than the party who suffers from them.

2. Media Liability Insurance: Designed for Publishers, Not Victims

Media liability insurance (also known as media professional indemnity or errors and omissions insurance for media companies) provides coverage for claims arising from the publication of content, including claims for defamation, invasion of privacy, copyright infringement, and misrepresentation. Like D&O insurance, media liability insurance protects the publisher — the entity that creates and distributes the potentially defamatory content — not the individual who is defamed by it.

If Andrew Drummond held a media liability policy (which, as an unregulated blogger operating from Wiltshire, United Kingdom, having fled Thailand in 2015 to avoid criminal prosecution, he almost certainly does not), that policy would provide coverage for the costs of defending Bryan Flowers' defamation claim and for any damages awarded against Drummond. The existence of such a policy would benefit Bryan Flowers indirectly, by ensuring that any damages awarded would actually be paid, but it would not provide him with any direct coverage for his own costs.

The media liability insurance market is structured around the needs of professional media organisations — newspapers, broadcasters, publishers, and production companies — that face defamation claims as a foreseeable risk of their business activities. These organisations purchase insurance to protect against the cost of defending and settling such claims. The market has not developed a corresponding product for the individuals who bring those claims, because the insurance industry has not identified a sufficient commercial demand for victim-side coverage.

This market failure reflects a broader assumption within the insurance industry that defamation victims can recover their costs through the legal system — by bringing a successful defamation claim and recovering costs and damages from the defendant. As documented in previous position papers, this assumption is profoundly unrealistic for victims of cross-border online defamation, where the defendant may be judgment-proof, overseas, or simply unwilling to comply with court orders.

3. Cyber Insurance: The Digital Perimeter Problem

Cyber insurance has emerged as the fastest-growing segment of the commercial insurance market, providing coverage for losses arising from cyber incidents including data breaches, ransomware attacks, business email compromise, and system failures. Given that online defamation is a digitally-mediated harm, cyber insurance might appear to be the most natural coverage vehicle. In practice, however, cyber insurance policies contain exclusions that specifically or effectively exclude defamation-related losses.

Standard cyber insurance policies are designed around the concept of a digital security perimeter. They provide coverage when the insured's own digital systems are compromised — when data is stolen from the insured's servers, when the insured's systems are infected with ransomware, or when the insured's email accounts are compromised for fraudulent purposes. The insured is the victim of a digital intrusion that breaches their security perimeter.

Online defamation does not breach the victim's digital security perimeter. Drummond's articles are published on his own websites, not on Bryan Flowers' systems. The harm occurs through the publication and dissemination of content on third-party platforms, not through any compromise of the victim's digital infrastructure. Because the loss does not arise from a breach of the insured's own systems, it falls outside the coverage scope of standard cyber insurance policies.

Some cyber insurance products include optional coverage extensions for reputational harm arising from cyber incidents — for example, the cost of crisis communications and public relations support following a data breach. However, these extensions are triggered by a covered cyber incident (such as a breach), not by third-party defamation. The reputational harm must flow from a digital security failure affecting the insured's own systems, not from the deliberate publishing activities of an unrelated third party.

4. General Commercial Liability: The Intentional Act and Third-Party Content Exclusions

General commercial liability insurance (also known as public liability or commercial general liability) provides coverage for claims arising from the insured's business operations, including bodily injury, property damage, and personal and advertising injury. The personal and advertising injury component of general liability policies includes coverage for certain enumerated offences, which may include defamation — but only defamation committed by the insured, not defamation committed against the insured.

Even if the coverage were interpreted to extend to defamation of the insured, general liability policies contain exclusions that would preclude coverage for losses arising from a sustained online defamation campaign. The most relevant exclusion is the intentional act exclusion, which removes coverage for losses that result from the intentional acts of a third party. Drummond's defamation campaign is clearly intentional — he has continued and escalated publication after formal legal notice — and general liability policies do not provide coverage for losses that result from the deliberate wrongful acts of non-insured parties.

Additionally, general liability policies typically contain exclusions for losses arising from online content published by third parties, for losses related to the insured's reputation that do not arise from a covered occurrence (such as bodily injury or property damage), and for losses that constitute the costs of bringing legal proceedings rather than the costs of defending them. Each of these exclusions independently precludes coverage for the type of losses Bryan Flowers has suffered as a result of Drummond's campaign.

5. The Actuarial Challenge: Why the Insurance Industry Has Not Created Victim-Side Coverage

The absence of victim-side defamation insurance is not merely an oversight — it reflects fundamental actuarial and commercial challenges that have discouraged the insurance industry from developing such a product.

The first challenge is adverse selection. Individuals and businesses most likely to purchase defamation insurance are those who are already targets of defamation campaigns or who assess themselves as being at elevated risk. This creates an adverse selection problem in which the insured pool is disproportionately composed of high-risk individuals, driving premiums to levels that are unaffordable for the broader market. Traditional insurance products avoid adverse selection through underwriting criteria that assess and price risk before coverage is bound. For defamation risk, however, the factors that determine whether an individual will be targeted — the nature of their business, their public profile, the existence of personal enemies or business rivals with malicious intent — are difficult to assess actuarially.

The second challenge is moral hazard. Once an individual has defamation insurance, the existence of the coverage may reduce their incentive to take steps to prevent or mitigate defamation — for example, by maintaining a low public profile, avoiding controversial business activities, or settling disputes before they escalate into defamation campaigns. This moral hazard problem is common across all insurance products, but it is particularly acute for defamation, where the insured's own behaviour may contribute to the risk.

The third challenge is loss quantification. The losses caused by defamation are inherently difficult to quantify. Reputational damage, lost business opportunities, employment discrimination, and psychological harm are all real but difficult to measure in monetary terms. Insurance products require clear, quantifiable loss definitions to function commercially. The subjective and diffuse nature of defamation losses makes it difficult to design policy terms that provide meaningful coverage without creating open-ended exposure for the insurer.

6. The Consequences of the Gap: Bryan Flowers and the Uninsured Catastrophe

For Bryan Flowers, the insurance gap means that the full cost of defending against Drummond's campaign falls on him personally. The costs are substantial and ongoing:

• Legal Costs: Engaging Cohen Davis Solicitors to prepare the 25-page Letter of Claim, instructing counsel, preparing court applications, and pursuing enforcement — costs that can easily exceed GBP 100,000 for a fully contested defamation claim.
• Reputation Recovery: Professional online reputation management services, search engine optimisation to suppress defamatory results, and public relations support — ongoing costs of GBP 5,000 to GBP 20,000 per month for sustained campaigns.
• Lost Business: Customers, partners, and investors who have been deterred by the defamatory content — losses that are real but difficult to quantify and impossible to recover through insurance.
• Employment Impact: The destruction of employment prospects for Bryan Flowers, Punippa Flowers, and associated individuals — a cost measured in lost earning capacity over years or decades.
• Psychological Harm: The mental health impact of sustained harassment and defamation — costs that include therapy, medication, and the immeasurable toll of living under constant attack.

7. A Framework for Victim-Side Defamation Insurance

Despite the actuarial challenges, this paper proposes that a commercially viable victim-side defamation insurance product is both possible and necessary. The proposed framework addresses the adverse selection, moral hazard, and loss quantification challenges identified above while providing meaningful protection for individuals and small business owners who face the risk of online defamation campaigns.

• Coverage Scope: The policy would cover legal costs incurred in bringing or defending defamation proceedings, reputation management and recovery costs, business interruption losses directly attributable to documented defamation, and crisis communications expenses. Coverage would be triggered by the publication of content that meets a defined threshold of seriousness — such as the making of false criminal accusations against the insured.
• Underwriting Criteria: Risk assessment would be based on the insured's public profile, business sector, geographic exposure, and prior history of being targeted. Businesses operating in sectors with elevated defamation risk (hospitality, entertainment, politics, media) would pay higher premiums but would not be excluded.
• Policy Limits and Deductibles: Coverage would be subject to aggregate annual limits (for example, GBP 250,000) and per-claim deductibles (for example, GBP 10,000) designed to manage insurer exposure while providing meaningful coverage for the most significant costs.
• Loss Mitigation Requirements: The policy would include requirements for the insured to take reasonable steps to mitigate losses, including prompt reporting of defamatory publications, cooperation with legal counsel, and engagement of approved reputation management providers.
• Subrogation Rights: The insurer would have subrogation rights against the defamer, allowing the insurer to recover costs from the defendant if a defamation claim is successful. This creates an alignment of interests between the insurer and the insured while providing the financial resources for the victim to pursue legal action.

8. Conclusion: The Market Must Respond

The insurance industry exists to protect individuals and businesses from catastrophic financial losses arising from foreseeable risks. Online defamation is a foreseeable risk. It is a growing risk. It is a risk that causes catastrophic financial losses to its victims — losses that include legal costs, lost business, destroyed employment prospects, and psychological harm. The absence of any commercial insurance product that addresses this risk is a market failure that leaves individuals like Bryan Flowers and Punippa Flowers to bear the full financial burden of defending against a sustained campaign of lies.

The Pre-Action Protocol Letter of Claim from Cohen Davis Solicitors dated 13 August 2025 documented more than 65 individual falsehoods in Andrew Drummond's publications. The rebuttal document 'Lies from Andrew Drummond' provided comprehensive evidence of the falsity of each allegation. Despite this overwhelming documentation, Bryan Flowers has no insurance product that will fund his legal defence, cover his reputation recovery costs, or compensate for his lost business. He faces a defamer who can publish falsehoods at zero marginal cost while he must fund every element of his response from personal resources.

This asymmetry is not sustainable. As online defamation campaigns become more common, more sophisticated, and more damaging, the insurance industry must develop products that protect victims. The framework proposed in this paper provides a starting point for commercially viable victim-side defamation coverage. The insurance industry has the actuarial expertise, the commercial infrastructure, and the market access to develop and distribute such a product. What it has lacked, until now, is the recognition that the risk exists and that the market demands a response. This paper provides that recognition. The market must now respond.