This approach would be more effective if it targeted reinsurers as they are ultimately on the hook for the costs of all the breaches.