Question 1

What does cyber insurance actually pay for?

Accepted Answer

First-party costs: forensic investigation ($25K–$200K), legal review of regulatory obligations, breach notification mailings, customer credit monitoring (typically 1–2 years), ransomware extortion payments, system restoration, and business income lost during downtime. Third-party costs: defense and settlement of customer lawsuits, regulatory fines and proceedings, PCI fines from credit card networks, and media liability claims. Modern policies bundle all of this; older or stripped-down policies sometimes exclude ransomware or limit notification costs sharply.

Question 2

Will my cyber policy pay a ransomware demand?

Accepted Answer

Most current policies do, with caveats. Carriers require you to engage their pre-approved breach coach and ransom negotiator before paying anything. The negotiation often reduces demands by 50%+. Payments can't violate OFAC sanctions (some ransomware groups are sanctioned). Some carriers have introduced ransomware sublimits (e.g., $250K out of a $1M policy) or coinsurance (you pay 20%–25% of the ransom). Read sublimits carefully — a $1M policy with a $100K ransomware sublimit is functionally a $100K ransomware policy.

Question 3

What underwriting requirements should I expect?

Accepted Answer

MFA on all remote access and email is now mandatory at most carriers. Documented backups (preferably immutable or offsite), EDR or managed detection and response on all endpoints, employee security awareness training, an incident response plan, and patch management programs are commonly required. Larger applicants face supplemental questionnaires on privileged account management, network segmentation, and third-party vendor security. Failing to honestly answer the application can void coverage at claim time.

Question 4

Does my GL or BOP cover cyber claims?

Accepted Answer

No, almost universally not. Standard general liability and BOPs explicitly exclude data breaches, cyber events, and digital perils through clauses introduced industry-wide in 2014. Some BOPs include a small cyber endorsement ($50K–$100K) as a starter, but it's not designed to handle a real breach. Standalone cyber policies are the right answer for any business that depends on digital systems or holds personal data.

Question 5

What's a retroactive date and why does it matter?

Accepted Answer

Cyber is claims-made coverage with a retroactive date — the earliest date for which the policy will cover incidents, even if discovered later. New cyber policies often start with a retroactive date matching the policy effective date, meaning incidents that started before that aren't covered. When switching carriers, request the new carrier match the old retroactive date so prior unknown incidents stay covered. Without a matched retro, you create coverage gaps for slow-moving incidents that started months before discovery.

Question 6

How is cyber insurance priced for a small Florida business?

Accepted Answer

A 25-employee Florida small business with strong security posture typically pays $1,500–$5,000/year for $1M cyber. Healthcare, financial services, and any business holding 100K+ records see higher pricing — often $5K–$25K. Premiums hardened sharply during 2020–2022 ransomware surge but stabilized in 2024 as insurers' loss ratios improved. The biggest premium swings come from MFA adoption, EDR tooling, and prior claim history.

Question 7

Do I need cyber if I use a cloud provider like AWS or Google?

Accepted Answer

Yes — using a cloud provider doesn't transfer your data breach liability. AWS, Google, and Microsoft contractually disclaim responsibility for the data YOU store on their platforms. If your S3 bucket or Google Drive is misconfigured and exposes customer data, you're the one notifying affected individuals and paying the claim. Cloud-hosted businesses still need cyber coverage; some carriers require you to validate cloud security configurations as part of underwriting.

Cyber Liability Insurance

Cyber Insurance

What's Covered

How It Works

Quote Your Cyber Insurance Coverage

Understanding Cyber Insurance

Who needs this

How it pays out

The Florida reality

Cyber Insurance — Frequently Asked Questions

Stay Informed

Not sure what coverage you need?