Protection against data breaches, cyber extortion and the liability that follows a security incident.
Cyber insurance covers the financial fallout of a cyber incident — a data breach, ransomware attack or system compromise — including your own costs of responding to it and, in many policies, your liability to third parties whose data was affected. As businesses of every size hold more digital data and rely on more connected systems, this has become a meaningful gap in traditional business insurance.
Your own costs — incident response, forensics, notification, and system restoration — following a covered event.
Liability to others (customers, partners) arising from a data breach or security failure.
Costs of investigating, containing and communicating a breach, including specialist support where required.
Loss of income during downtime caused by a covered cyber incident.
Every policy is different — this is a general guide to the kind of exclusions common in this category, not a list for any specific policy.
Limit further damage where possible, without destroying evidence.
Don't wipe or reinstall systems before your insurer's incident-response team has been consulted.
Many cyber policies require early notification and may have empanelled incident-response partners.
Don't engage attackers without legal and professional advice.
Cyber incidents often carry separate regulatory obligations alongside the insurance claim — we can help connect you with the right resources.
For full step-by-step guidance and a claim assistance form, visit the Claims Centre →
We're preparing a short explainer on cyber insurance. In the meantime, the sections above cover the essentials — or get in touch with a question.
Usually not adequately — cyber risk is typically excluded or only lightly covered under general liability policies, which is why a dedicated cyber policy exists.
Smaller businesses are often targeted precisely because their defences tend to be lighter, and the cost of a breach can be proportionally more damaging. It's worth an honest assessment rather than assuming size alone is protection.
Some policies include cyber-extortion cover, but this varies significantly by insurer and involves important legal considerations. We'd talk through what's actually available and advisable rather than assume it here.
Tell us what you need covered — no payment or policy details required to start the conversation.