Cyber Theft Claims: Protecting Your Business After a Cyber Attack

The Growing Threat of Business Cyber Theft

Cyber theft is one of the fastest-growing risks facing businesses of all sizes. From small companies targeted by phishing emails to large corporations hit with sophisticated ransomware attacks, the financial impact of cybercrime can be devastating. When your business suffers a cyber loss, your insurance policy may provide coverage — but recovering that money requires navigating a complex and relatively new area of insurance claims.

Types of Cyber Losses Covered

Depending on your policy, business cyber coverage may apply to a range of loss scenarios:

• Ransomware attacks: When hackers encrypt your systems and demand payment to restore access. Coverage may include the ransom payment itself, data recovery costs, and business income lost during the downtime.
• Wire fraud and funds transfer fraud: Losses from unauthorized electronic transfers, often triggered by compromised email accounts or spoofed payment instructions.
• Social engineering fraud: When an employee is tricked into sending money or sensitive data to a criminal posing as a vendor, executive, or client.
• Data breaches: Costs associated with a breach of customer or employee data, including notification requirements, credit monitoring, forensic investigation, and legal defense.
• Business interruption from cyber events: Lost income when a cyber attack forces your business to shut down or operate at reduced capacity.

Cyber Liability Policies vs. Traditional Commercial Policies

A standalone cyber liability policy provides the broadest coverage for cyber-related losses. However, many businesses rely on endorsements added to their traditional commercial property or general liability policies. These endorsements often have significant limitations — lower sublimits, narrower definitions, and exclusions that may not be immediately obvious. Understanding exactly what your policy covers before a loss occurs is critical, but even after a loss, a thorough policy review can reveal coverage your insurer may not voluntarily disclose.

Reporting and Documentation Requirements

Cyber insurance policies typically have strict reporting requirements. Many require you to notify the insurer within a specific timeframe — sometimes as short as 48 to 72 hours after discovering the incident. Failing to meet these deadlines can jeopardize your coverage. Additionally, insurers often require you to use their approved forensic investigators and legal counsel, so check your policy requirements before engaging outside vendors.

Key documentation includes: the date and time the incident was discovered, how the breach or theft occurred, what systems and data were affected, financial records showing the amount of loss, all expenses related to the response and recovery, and any communications with law enforcement or regulatory agencies.

How a Public Adjuster Helps With Cyber Claims

Cyber insurance is a newer and rapidly evolving area, and many business owners are unfamiliar with the claims process. A licensed Public Adjuster can review your policy to identify all applicable coverages, prepare and document the claim to meet your insurer's requirements, calculate all covered losses including business interruption and extra expenses, and negotiate with the insurance company on your behalf. Because cyber policies vary widely in their terms and conditions, having a professional who understands these policies can help ensure you receive the full benefit of your coverage.