Bricking

Bricking is when a computer, server, or other device is made inoperative, making it “as useful as a brick.” It’s a cybersecurity incident that can be caused by firmware corruption, malicious attacks, or failed system updates.

Unlike a typical system glitch, a bricked device can’t just be rebooted. Depending on the severity of the incident, you may need to reinstall the device’s firmware—or completely replace it.

Bricking a business computer or device means rendering it lifeless, like a paperweight. It's not a minor malfunction, it's a complete device shutdown caused by human error, technical failure, or malicious attack.

Deliberate bricking is a cyberattack that renders your hardware inoperable. Intentional bricking can look like:

• Malware and viruses
• Ransomware attacks
• Permanent denial-of-service (PDoS)

Unintended bricking is typically caused by a human error or technical failure, such as:

• Botched firmware updates
• Misconfigured patches
• Incompatible software

There are many ways bricking can happen—maliciously and accidentally. Here are some of the most common causes:

As a type of intentional bricking attack, cybercriminals can use social engineering attacks, malicious downloads, and bots to access devices, corrupt firmware, and destroy operating systems.

Here are a few ways this can play out for small businesses:

IoT mass bricking is a type of automated attack where internet-connected devices, like cameras or routers, are corrupted and rendered useless.

Should a construction company’s digital security system suffer an automated attack, all of its jobsite surveillance cameras could get bricked overnight, leaving expensive equipment and materials unmonitored.

Infrastructure sabotage is a targeted cyberattack on industrial or operational systems that destroys hardware and causes critical damage to equipment.

If a cybercriminal finds an unpatched vulnerability on a manufacturing business insurance parts manufacturer’s digital production system, they could overwrite firmware and brick the entire production line, instantly halting all operations.

Ransomware can encrypt your data and bar access to important systems. Sometimes, hackers will brick systems to escalate cyber extortion threats when a ransom wasn’t paid.

For example, cybercriminals may threaten to permanently disable a web hosting firm’s server if they don’t pay a ransom. Bricking their servers would cost the company’s clients a catastrophic amount of money and incite a lawsuit against the small firm.

Bricking can also be caused by accidents that lead to permanent damage, such as installing the wrong firmware on a device, or having a critical software update interrupted by a power outage or user error.

For example, a retail store could have a power outage during a software update, corrupting its point-of-sale (POS) system and rendering it inoperable.

Jailbreaking or modding a device—such as removing iOS restrictions on an iPhone—can also brick a device if the process goes wrong.

Most small businesses have limited IT resources and inadequate (or nonexistent) cybersecurity protocols, making them prime targets for cyberattacks. In fact, it has been reported that 43% of cyberattacks target small businesses.

If your business suffers from a cyber event that permanently disables hardware, the financial consequences can be catastrophic. A ransomware attack now costs small firms roughly 53,000 an hour in downtime, and 75% of SMBs don’t have the funds to survive one.

These costs add up quickly, including:

• Business interruption expenses, including lost revenue and employee wages
• Hardware replacement costs
• Customer notification costs for data breaches
• Lost customer trust

For example, say a healthcare facility’s computers, check-in tablets, and servers are bricked in a malicious cyberattack. Without access to patient records or the ability to process insurance, the clinic must close until replacement hardware can be implemented.

Cyber insurance offers crucial protection for businesses against data breaches and cyberattacks. It helps pay for:

• Data breach response costs
• Ransomware payments
• Legal defense costs, settlements, and judgments

Some cyber policies include limited bricking protection, but most insurance providers require you to purchase bricking coverage as an endorsement.

These add-ons can fill coverage gaps between cyber and commercial property insurance policies, so you’re not stuck with significant losses after a bricking incident, which can include:

• Hardware replacement costs
• Installation and setup labor expenses
• Business interruption losses
• Damaged equipment disposal costs

Although cyber insurance is an essential part of your company's risk management strategy, there are proactive measures you can take to enhance your cybersecurity and reduce the chances of a bricking incident.

Outdated firmware is one of the easiest entry points for cybercriminals. Protect your devices by:

• Applying patches regularly and enabling automatic updates when possible.
• Only allow updates from the manufacturer’s official website or your IT vendor.

Backups won't reverse a bricked device, but they can help prevent a hardware shutdown from becoming a major company crisis. Make sure to:

• Keep multiple copies of your data off-site
• Regularly test all backups
• Document your incident response plan and provide it to all employees

If you are still unsure about the best way to protect your business against cyber risks, you can speak with your insurance agent. They can help determine where your business is most vulnerable and identify other options that you can pursue to reduce the risk of future cyber incidents.

Get free quotes for affordable bricking insurance from top-rated providers by filling out our easy online application. You can speak with a licensed insurance agent if you have questions about specialized coverage like cyber insurance and bricking protection.

Once you find the right policies for your small business, you can begin coverage in less than 24 hours and get a certificate of insurance (COI) for your small business.