Culpability
I do wonder how the insurance companies would attribute 'cyber crime' to nation states and whether that would include actors geographically located in, say Russia, which are not an official part of the government, but which, at least in the hallowed walls of the Register, are often associated with the government. At least tolerated (while they do not attack Russia's interests) etc. The various groups known as 'Russian Business Network', 'Russian Bear' and other actors (Google them at your own risk) are often considered by Western media to be working with or for the Russian state, if not actually part of it.
