Companies paid out £197mn, according to the Association of British Insurers, prior to a string of high-profile attacks