Warren backs TRIA renewal but flags cyber and NBCR as unfinished business
A unanimous committee vote hides a longer list of unresolved coverage gaps
Warren backs TRIA renewal but flags cyber and NBCR as unfinished business
CYBER
By Josh Recamara
21 Sep 2026

Senator Elizabeth Warren (pictured), the ranking Democrat on the Senate Banking Committee, voted in favor of reauthorizing the Terrorism Risk Insurance Act (TRIA) at the committee's September 11 markup, describing the program as still working as intended while signaling she intends to push for additional reforms in a follow-on legislative effort.

Warren's TRIA support was notably bipartisan in context. The committee voted unanimously to advance the reauthorization, but every other item on the same day's agenda, four Trump administration nominees, passed or failed on strict party-line votes.

TRIA's unanimous passage was the exception, which is precisely the kind of durable cross-party floor support that industry groups including NAMIC and APCIA have cited in arguing Congress has no structural reason to delay full Senate action.

Warren's yes vote comes with a specific list of follow-on priorities

Warren was direct about what she sees as gaps the current reauthorization doesn't close.

"I'd like to see Congress take up some unfinished work, including reforms to address cyber risks, terrorism involving nuclear or biological weapons, and taxpayer protections. But for now, I am happy to vote yes on the reauthorization, and I will work with my colleagues on those changes moving forward," Warren said.

That list tracks closely with concerns the insurance and reinsurance industry has itself raised about TRIA's structural limitations.

Insurance Business reported in detail on a Morningstar DBRS analysis published on the 25th anniversary of the September 11 attacks finding that cyber terrorism is the program's most significant untested frontier, given that a destructive attack on shared cloud infrastructure or payment systems could generate correlated losses across geographically dispersed policyholders that geographic diversification alone can't contain.

The US Treasury's own 2026 effectiveness report modeled a hypothetical hybrid kinetic-and-cyber attack on Virginia data centers that generated roughly $14.6 billion in modeled total insured losses, 88% of which were cyber-related, with approximately $4.85 billion falling to federal TRIP payments.

Insurance Business has also reported separately on the coverage gaps that exist even within the current program, including the fact that cyber terrorism attribution disputes and differences between primary and reinsurance contract wording can leave insurers retaining more risk than expected even when TRIA technically covers a qualifying event.

What Warren didn't say is also worth noting

Warren's remarks didn't signal any intent to hold up the clean seven-year extension in order to force those reforms now. Her framing, voting yes first and promising to work on improvements separately, mirrors the approach industry groups and Republican co-sponsors have taken throughout this reauthorization cycle: extend the program cleanly and address the structural questions in a subsequent legislative effort rather than risk a lapse by attaching contested provisions to the reauthorization itself.

The nuclear, biological, chemical and radiological gap Warren mentioned is a longstanding one. TRIA requires insurers to offer coverage for NBCR losses in workers' compensation, where exclusions aren't permitted, but the program's certification and trigger mechanisms weren't designed with mass-casualty biological or chemical attacks in mind, and the reinsurance capacity behind NBCR risk remains thin compared with conventional terrorism. Some global reinsurers' largest single-loss scenarios involve a nuclear detonation over a major US city, a risk profile that TRIA's current structure would need significant modification to address adequately.

Why this matters for insurers and brokers

Warren's remarks do two things for the insurance industry simultaneously. First, they confirm the immediate reauthorization has the votes it needs even among Democrats who are otherwise in sharp opposition to the administration on most financial regulation questions.

Second, they put the industry on notice that cyber terrorism coverage gaps and NBCR limitations are now a named congressional priority for a senior member of the committee that oversees TRIA, meaning the follow-on legislative debate Warren is signaling will likely begin in earnest once the current extension clears.

Insurers, reinsurers and brokers who have been monitoring TRIA reauthorization as the near-term priority should now also be thinking about what a cyber terrorism backstop proposal would need to look like to be workable, since that debate appears closer than the clean seven-year extension might suggest.

Related Stories
Free newsletter

We'll keep you up-to-date with the latest breaking news, cutting edge opinion, and expert analysis affecting both your business and the industry as whole.

Free newsletter

Our daily newsletter is FREE and keeps you up - to - date with the world of Insurance. Please complete the form below and click on subscribe for daily newsletters from IB US.