Local preview of the accountIntelCard LWC for Travelers — same content reps will see in SFDC once the LWC is dragged onto the Account Lightning Record Page.

Account Intel — Travelers

Refreshed Apr 29, 2026
Travelers is a $34B insurance giant (34K employees) with a mature security org led by CISO Donald Garvey and dedicated data/cloud security directors—but no DSPM incumbent identified. Jim Lemieux (Sr. Dir., Data Security) and Ken Soukup (Sr. Dir., Cloud Security Strategies) are classic DSPM buyers; cloud migration + insurance compliance (NAIC, state breach laws) + Q1 2026 sector breaches create urgency. Lead with data discovery/classification across cloud and on-prem; risk is potential in-house build via the Digital Forensics team. Refreshed: 2026-04-29
🌱LAND
Greenfield — No DSPM
Medium confidence
WARM
Opp Rating
▸ MOTION
LAND: lead with fastest time-to-value for data discovery and classification across AWS/Azure/GCP and on-prem. Anchor on Jim Lemieux's (Sr. Dir., Data Security) mandate and Ken Soukup's (Sr. Dir., Cloud Security Strategies) cloud migration. Frame DSPM as the bridge between siloed data and cloud security functions. Reference Q1 2026 earnings (strong underwriting gains) and sector breach environment to justify investment. Refreshed: 2026-04-29
▸ Greenfield (no incumbent) (—)
Add Jim Lemieux (Senior Director, Data Security) and Ken Soukup (Senior Director, Cloud Security Strategies) to a targeted outbound sequence. Lead with a data discovery/classification use case tied to cloud migration and insurance compliance (NAIC, state data breach notification laws). Reference the Q1 2026 earnings call (April 16) where Travelers reported strong underwriting gains—frame DSPM as a risk-reduction lever for continued growth.
Cloud Migration ProjectNew Compliance MandateRecent Breach
No structural changes since last refresh. (This is the second snapshot — delta computed against the v1.0 run; play, rating, incumbent, and triggers all unchanged. Future refreshes will surface what's changed week-over-week.)
Senior Director, Data Security (Jim Lemieux) and Senior Director, Cloud Security Strategies (Ken Soukup) roles indicate a security org structured around data and cloud—classic DSPM buyer personas—but no active vendor engagement detected in the last 90 days.
The greenfield thesis assumes Travelers has not deployed a DSPM solution. If they've built an in-house data discovery capability (plausible given the Digital Forensics & eDiscovery function under John Lippe) or are using a CNAPP's data module (e.g., Wiz, Prisma) without our knowledge, the play collapses. The absence of Gong calls and vendor case studies supports greenfield, but the risk is that we're flying blind on their actual tooling.
Account Overview: Travelers is a $34B property & casualty insurance giant with 34,000 employees, operating across commercial and personal lines in the U.S. and internationally. The security organization is led by CISO Donald Garvey, with a deep bench including Jim Lemieux (Senior Director, Data Security), Ken Soukup (Senior Director, Cloud Security Strategies), John Lippe (Director, Data Security eDiscovery & Digital Forensics), and Carl Vazquez / Brian Bemis (both Senior Directors, Information Security). The org structure signals a mature security function with dedicated data and cloud security leadership—classic DSPM buyer personas.

DSPM Landscape: No incumbent DSPM vendor was identified. Searches across Varonis, Cyera, and BigID case studies returned no Travelers references. Tavily news queries surfaced no vendor mentions.

Evidence & sources (15 citations)

high
Travelers reported strong Q1 2026 underwriting gains and lower catastrophe losses, creating a positive financial context for security investment.
high
The insurance sector saw multiple Q1 2026 data breaches, raising board-level awareness of data security risks.
medium
Booking.com disclosed a data breach in April 2026 affecting reservation details, highlighting the travel and insurance sectors' exposure to data security incidents.
medium
Cloud migration is a top priority for enterprises in 2026, with healthcare and financial services organizations leading the charge.
high
AI governance and kids' privacy emerged as top priorities for regulators in Q1 2026, with companies urged to verify that AI agents fit into existing governance frameworks.
high
Ransomware attacks targeting payment infrastructure surged in Q1 2026, with BridgePay confirming a ransomware attack that knocked key systems offline.
high
Medical device giant Medtronic disclosed a breach in April 2026 after hackers claimed theft of 9 million records, underscoring the risk of data exposure in regulated industries.
high
The Interlock ransomware gang exploited a Cisco Secure Firewall Management Center zero-day in attacks since January 2026, highlighting the risk of unpatched vulnerabilities in enterprise security infrastructure.
high
Travelers has a Senior Director of Data Security (Jim Lemieux) and a Senior Director of Cloud Security Strategies (Ken Soukup), indicating a security org structured around data and cloud—classic DSPM buyer personas.
high
Travelers has a Director of Data Security eDiscovery & Digital Forensics (John Lippe), suggesting a mature data governance practice that could be a tailwind or headwind for DSPM adoption.
high
Travelers has 65+ security contacts in SFDC, including multiple senior directors in information security, cyber operations, and GRC, indicating a large and mature security organization.
medium
No DSPM incumbent was identified in Varonis, Cyera, or BigID case studies for Travelers or similar insurance enterprises.
medium
Compliance budget cuts are tempting for organizations in 2026, but regulatory enforcement and regulatory change remain the top triggers for compliance investment.
medium
Travelers was hit with a $2B bad faith lawsuit in April 2026, which may increase scrutiny on data security and compliance practices.
medium
Google Drive ransomware detection is now enabled by default for all paying users, reflecting the growing threat of ransomware targeting cloud data stores.

📚 The 7 Plays — what each one means

Account Intel picks one play per account based on incumbent + triggers + signals. Each play has its own motion verb (DISPLACE/LAND/DISRUPT/COMPLY/EXPAND/RESPOND), talk-track wedge, and primary buyer persona.

DISPLACE Displacement — Pure-Play DSPM
Cyera, Varonis, or BigID is the incumbent. Lead with AI classification depth, time-to-value, and vendor-experience differentiation.
Buyer: CISO, Head of Data Security
DISPLACE Displacement — CNAPP Bundled
Wiz / Prisma Cloud / SentinelOne doing "good-enough" DSPM as a CNAPP feature. Position pure-play depth + unstructured coverage vs. CNAPP feature breadth.
Buyer: CISO, Cloud Security Lead
🌱 LAND Greenfield — No DSPM
No incumbent. Security org acknowledges the data-layer gap. Wedge: fastest time-to-value, breadth-then-depth (asset inventory → classification → policy).
Buyer: CISO, VP Security
DISRUPT AI / LLM Exposure
RAG pipelines, LLM training data, shadow AI usage. Wedge: data-flow visibility into AI systems and model risk.
Buyer: Head of AI/Data + CISO
COMPLY Compliance-Forced
CMMC 2.0, GDPR enforcement, HIPAA, SOC 2 audit, or sectoral mandate driving urgency. Wedge: classification-to-policy automation, audit readiness.
Buyer: GRC, Compliance Lead
EXPAND Cloud Migration / Data Sprawl
Active AWS / Azure / GCP buildout creating data-discovery problem. Wedge: cloud-native architecture, scale, multi-cloud coverage.
Buyer: Cloud Architect, CISO
🚨 RESPOND Breach / Incident Response
Recent breach forces vendor evaluation. Wedge: rapid deployment, remediation workflows, forensic readiness.
Buyer: CISO, IR Lead

Anti-mush guard: when evidence doesn't support a confident play, the bot returns a sparse-data verdict (no play, "Cold" rating, narrative explaining low evidence) rather than defaulting to a middle option. Honest "we don't know" beats a confident wrong answer.