Contract/lease often required

Cyber Liability Insurance

Cyber liability insurance covers the costs of a data breach or cyberattack — customer notification, credit monitoring, forensic investigation, ransomware payments, business interruption from downtime, and legal liability if customer or client data was exposed. Any business that stores customer payment information, personal data, or relies on digital systems to operate is exposed, and the cost of a breach (legal, notification, and reputational) routinely runs into six figures even for small businesses — well beyond what most owners can absorb out of pocket.

Cyber Liability: what it costs, what it covers, who needs it

$60–$200/moTypical monthly cost
$1,000,000 per claim / $1,000,000 aggregateTypical coverage limit
Any business handling customer payment data or personal information, or that would suffer real financial harm from a systems outage or ransomware attack.Who needs this coverage

Rates vary by state, revenue, and claims history — always compare multiple quotes.

Not legally mandated, though several state privacy laws impose breach-notification duties that a cyber policy is specifically built to fund.

What's covered

  • Breach response costs: forensics, legal counsel, customer notification, credit monitoring
  • Ransomware payments and system restoration costs
  • Business interruption from a covered cyber event
  • Liability for third-party claims tied to exposed customer data
  • Regulatory fines and penalties tied to data-privacy laws, where insurable

What's excluded

  • Losses from outdated software or ignored security patches, in some policies
  • Reputational harm without a quantifiable financial loss
  • Bodily injury or property damage (unrelated policy types)
  • Prior known breaches not disclosed at application

Breach response costs routinely reach six figures, even for a business with just a few thousand customer records.

What drives the price

  • Volume and sensitivity of customer data stored
  • Existing security practices (MFA, encryption, backups)
  • Industry — ecommerce and healthcare typically pay more
  • Coverage limit and retention/deductible chosen

Real claim example

An online store's checkout system is breached, exposing 4,000 customers' payment details.

The policy covers forensic investigation, legal counsel, and customer notification/credit monitoring — roughly $95,000 total.

The policy covers forensic investigation, legal counsel, and customer notification/credit monitoring — roughly $95,000 total.
Payout from a single real claim — well above the monthly premium
This is exactly why businesses don't skip this coverage.

Cyber Liability is commonly required for businesses of any size. At $60–$200/mo, it is one of the most cost-effective ways to protect against a potentially six-figure claim.

FAQs

Do I need this if I use Shopify or another hosted platform?

Yes — the platform securing its own infrastructure doesn't cover your liability for a breach involving your store's customer data or your own compromised accounts.

Does cyber insurance cover ransomware?

Most policies do, covering both the ransom payment (where legal) and the cost of restoring systems — check the specific policy's ransomware sublimit.

Is this the same as tech E&O?

They're related but distinct — tech E&O covers claims that your software/service failed a client, while cyber liability covers breaches of data you hold.

See all policy types