"it seems insurers are mostly raising prices and looking for ways to stop paying out so much to attack victims"
Which is perfectly reasonable. Insurance is based on risk. If you increase your risk by negligence then you can expect prices to rise. And again, if you don't invest in security and suffer the consequences of an attack why should an insurance company pay out?
Insurance payments are made in cases of reasonable actions to prevent catastrophe, failing. You can't save your money refusing to implement reasonable protection and then expect someone else to cover the costs of the consequences.