Business Insurance
Cyber Liability
Coverage for data breach response, cyber events, and related liability.
Coverage overview
Cyber liability policies generally provide first-party costs — such as breach response, forensics, notification, and business interruption — along with third-party liability arising from a security or privacy failure.
Coverage varies significantly by carrier, and insurers increasingly consider your security controls when evaluating eligibility.
Who may need this coverage
- Businesses that store customer or employee data
- Companies that rely on systems, email, or online payments
- Organizations subject to privacy or contractual obligations
- Any business exposed to phishing or ransomware
Common coverage considerations
- First-party breach response services and costs
- Third-party liability limits
- Social engineering and funds transfer fraud sublimits
- Business interruption from a cyber event
- Security requirements and eligibility conditions
What may not be covered
- Property damage and bodily injury (other policies)
- Loss of value from your own IP, generally
- Fraud or criminal acts by the insured
- Events excluded or below required security controls
Factors that may affect price or eligibility
- The type and volume of data you handle
- Revenue and industry
- Your security controls and practices
- Coverage limits, sublimits, and deductible
Information commonly needed for a quote
- The kinds of sensitive data you store
- Annual revenue and number of records
- Your security controls (MFA, backups, training)
- Any prior incidents or claims
A practical example
A phishing email leads to a ransomware event that disrupts operations. Depending on the policy, cyber coverage may help with forensics, breach response, notification, and business interruption costs, subject to limits, sublimits, and conditions.
Questions to ask a licensed professional
- Which first-party costs does the policy cover?
- Is social engineering or funds transfer fraud included?
- What security controls does the carrier require?
- How is business interruption from a cyber event handled?
Frequently asked questions
This page is a general educational summary and does not change, replace, or create insurance coverage. Coverage terms, conditions, limits, exclusions, eligibility, and availability vary by policy, carrier, state, and underwriting requirements. Coverage is not effective unless confirmed in writing by an authorized insurance carrier or properly licensed insurance professional.
Let's Protect What Matters to You.
Tell us what you need to protect, and a licensed insurance professional can help you explore available options.