Mon - Fri 8am - 5pm (203)-834-5900

Trusted By

2500+ Clients

Industry Leader Since

1932

Serving Customers In

38 States

Get A Quote

Cyber and AI — What Your Business Insurance Program Needs to Address Before 2027

  • Business Insurance

The 2027 policy year will arrive with a commercial insurance landscape materially different from the one that existed when most mid-market businesses last had a complete program review. Two developments are driving that change. First: the Insurance Services Office introduced new AI-related exclusions at the start of 2026, and a significant number of major underwriters have followed with their own AI exclusion provisions embedded in commercial policies that renewed throughout the year. Second: cyber underwriting standards, which softened slightly in 2025 as competition among cyber carriers increased, are tightening again for the 2027 policy year as ransomware severity trends resumed their upward trajectory in mid-2026.

The businesses that are best positioned for 2027 are the ones that address these developments in Q4 2026 — before renewal, before a claim, and before the AI exclusion language in a renewed policy becomes the reason a claim is declined. What follows is a planning framework for what to evaluate before December 31.

Step One: Find the AI Exclusions in Your Current Policies

The ISO AI exclusion, introduced at the start of 2026, excludes bodily injury, property damage, and personal and advertising injury arising from AI systems — broadly defined to include machine learning, algorithmic decision-making, and automated systems that generate outputs influencing decisions. Several major underwriters have introduced their own AI-related exclusions with different scope, different definitions of what constitutes an AI system, and different carve-backs for certain uses.

The practical implication is that a business that uses AI in any customer-facing, employment, or operational decision process may have GL policy language that excludes claims arising from those uses. The exclusion does not require that the AI system caused harm through a sophisticated failure mode. A recommendation engine that influences a purchase decision, a screening tool that filters applicants, a chatbot that provides information that proves incorrect — each of these is a potential AI exclusion trigger under some policy forms.

The first action item for Q4 is requesting a copy of the AI exclusion language in every commercial policy that renewed in 2026 and having your broker provide a written explanation of what each exclusion covers and what coverage, if any, responds to AI-related claims that the GL policy now excludes. This is not a hypothetical exercise. ISO exclusions are being applied in claims today.

Step Two: Evaluate the Gaps the AI Exclusions Create

Three coverage products may respond to AI-related liability exposure that GL excludes.

Technology errors and omissions (Tech E&O) covers claims arising from professional services rendered through or with technology, including AI-enabled tools. For businesses that provide AI-enabled services or advice to clients, Tech E&O may cover the professional services component of an AI-related claim that GL’s professional services exclusion and AI exclusion together would otherwise leave uninsured.

Cyber liability coverage, depending on policy language, may respond to certain AI-related claims — particularly those involving data privacy, unauthorized processing of personal information, or AI-enabled social engineering fraud. The intersection of AI and cyber claims is where policy language matters most and where gaps are most likely to exist between what a business owner assumes is covered and what the policy actually provides.

D&O insurance, as noted in the September issue, responds to claims arising from governance and management decisions — including the decision to adopt and deploy AI tools without adequate oversight. As the EEOC, FTC, and state regulators intensify scrutiny of AI governance, and as class-action plaintiffs develop viable theories for algorithmic harm claims, D&O becomes an increasingly relevant coverage for any business that has approved AI tool deployment at the management level.

Step Three: Reassess Cyber Coverage Against 2027 Underwriting Requirements

Cyber underwriting requirements are tightening for the 2027 policy year. Ransomware severity — the total cost of a ransomware incident including downtime, remediation, ransom payments, and regulatory response — resumed its upward trajectory in mid-2026 after a brief period of relative stability. Carriers are responding by strengthening underwriting requirements, particularly around three areas.

Backup architecture validation is the first. Carriers are no longer accepting a yes/no answer on whether backups exist. For 2027 renewals, underwriters are requiring documentation that backups are tested, that they are stored in locations not reachable from the primary network, and that recovery time objectives have been validated through actual restore testing. A business that maintains backups but has not tested restoration in twelve months will face harder underwriting questions than one that can show a tested recovery procedure.

Multi-factor authentication scope is the second. The requirement for MFA has been in place for several years. The 2027 underwriting expectation is moving beyond MFA on email to MFA on all privileged accounts, all remote access pathways, all cloud service administrative consoles, and all financial transaction systems. Partial MFA implementation — covering email but not RDP, covering employee accounts but not service accounts — is now specifically flagged in underwriting questionnaires.

AI-powered threat detection is the third. Carriers are beginning to differentiate between businesses that use legacy antivirus and businesses that have deployed endpoint detection and response (EDR) systems with AI-powered behavioral analysis. EDR is already a standard underwriting requirement at most carriers. For 2027, the question is likely to expand to whether the EDR system has been configured to detect AI-assisted attack patterns — deepfake-enabled social engineering, AI-generated phishing, and automated credential stuffing — that signature-based detection cannot identify.

Step Four: Review the Deepfake Fraud Exposure Specifically

A convincing voice or video call can now be part of a business email compromise (BEC) attempt. A fraudster may impersonate an executive or trusted counterparty to pressure an employee into sending a wire transfer or changing payment instructions. The FBI has warned that criminals use generative AI to make financial fraud more believable. Its 2025 Internet Crime Report puts reported BEC losses at roughly $3 billion. That figure covers BEC generally; it does not measure deepfake-related BEC losses separately. ic3.gov

A cyber policy with social engineering coverage may respond to a fraudulent transfer, but the label alone does not establish coverage. Businesses should confirm how the policy defines a covered event, whether BEC has a separate sublimit and what verification procedures the policy requires. The answers may be especially consequential when an employee authorized the transfer after receiving a convincing fraudulent request.

Before year end, take two practical steps. First, ask your broker to review the policy’s specific treatment of BEC, social engineering and AI-assisted impersonation. Second, require independent verification of wire requests and account changes. A callback to a number already on file is more reliable than calling a number supplied in the request. The FBI’s guidance on AI-enabled financial fraud likewise advises people to independently verify a caller’s identity. ic3.gov

Tooher-Ferraris works with businesses to assess cyber coverage as part of their broader commercial insurance program and evaluate options through its specialty programs. A policy review can clarify the applicable limits and conditions before a fraudulent payment request tests them.

Frequently Asked Questions

What does the ISO AI exclusion exclude from my general liability policy?

The ISO AI exclusion, introduced in 2026, excludes coverage for bodily injury, property damage, and personal and advertising injury arising from AI systems, which the exclusion defines broadly to include machine learning, algorithmic decision-making, and automated systems that generate outputs influencing decisions. The specific scope varies by carrier and by the edition of the exclusion in each policy. Reviewing your specific policy language with your broker is the only reliable way to understand what the exclusion in your policy covers.

What coverage responds to AI-related claims that my GL policy now excludes?

Depending on the nature of the AI-related claim, Technology E&O, cyber liability, and D&O insurance may each provide partial or full coverage for claims the GL AI exclusion bars. The coverage that responds depends on whether the claim arises from professional services rendered with AI tools (Tech E&O), from a data privacy or social engineering event enabled by AI (cyber), or from a governance decision to adopt and deploy AI without adequate oversight (D&O).

How are cyber underwriting requirements changing for 2027?

Cyber underwriters are tightening requirements in three specific areas for the 2027 policy year: backup architecture validation (requiring documented restore testing, not just backup existence), MFA scope (expanding from email to all privileged accounts, remote access, and cloud consoles), and AI-powered threat detection (evaluating whether EDR systems are configured to detect AI-assisted attack patterns). Businesses that address these requirements proactively before renewal are better positioned for favorable terms.

Ready to review your cyber and AI coverage before the 2027 policy year begins? The team at Tooher-Ferraris has been helping businesses navigate commercial insurance since 1932.

Contact us today to schedule a no-obligation consultation.

Related Post

  • Business Insurance

Supply Chain and Macro Volatility — What It Means for Your Business Interruption Coverage

A distributor of industrial components has one primary supplier — a manufacturer in Southeast Asia. In March, new tariffs take effect that raise the cost of the supplier’s components by 28% overnight. The distributor cannot pass the full increase to customers without losing its largest contract. In April, a typhoon causes a three-week production shutdown at the supplier’s facility. The distributor’s domestic inventory runs out in week two. Orders go unfulfilled. Revenue stops. In May, a new geopolitical development triggers port delays that extend the production shutdown’s ripple effect by another two weeks.

The distributor’s business interruption coverage does not respond to any of this. Standard BI requires direct physical damage to the insured’s own property as a prerequisite for coverage. No damage occurred at the distributor’s location. The supply chain disruption — the tariff increase, the supplier’s production shutdown, the port delay — falls entirely outside the coverage grant. Five weeks of lost revenue, accumulated inventory write-downs, and a damaged customer relationship: none of it insured.

This is not an edge case. It is the normal operating environment for mid-market companies in 2026, and the gap between what standard business interruption covers and what supply chain disruption actually costs is one of the most significant uninsured exposures in commercial insurance.

What Standard Business Interruption Was Designed For

Business interruption insurance was designed for a specific scenario: a covered peril — fire, windstorm, explosion — damages the insured’s property and prevents operations. The BI coverage replaces lost income and covers ongoing fixed expenses during the period of restoration. It is essentially a loss-of-revenue coverage attached to a property claim, which is why it requires direct physical damage as a trigger.

That design made sense when supply chains were local, when most businesses depended on their own facilities for their productive capacity, and when the primary business interruption risk was a fire at the factory rather than a disruption at a facility twelve time zones away. The world changed. The coverage structure did not.

The Three Macro Forces Creating Uninsured Supply Chain Exposure

Geopolitical conflict and trade policy volatility are the first force. The combination of active conflicts affecting shipping lanes, shifting tariff regimes, and export control restrictions has made supply chain disruption an expected operating condition rather than an exceptional event for many mid-market manufacturers, distributors, and importers. A business whose supply chain runs through Eastern Europe, the Taiwan Strait, or key chokepoints in global shipping routes is exposed to interruption from causes that standard commercial property and BI policies were never designed to address.

The tariff environment specifically creates a cost-volatility exposure that overlaps awkwardly with business interruption. When a tariff spike makes a previously viable supply chain economically non-viable, the business faces an interruption of its cost model without any interruption of its physical operations. That exposure does not fit cleanly into any standard commercial insurance product.

Secondary weather perils are the second force. Inland flooding, severe convective storms, and extreme heat events are disrupting supply chains at locations that are not the insured’s own facilities. A cold storage facility loses inventory because a power grid serving the region fails during an extreme heat event. A distribution center cannot receive inbound shipments because a secondary road network was damaged by flooding that did not touch the distribution center itself. These are supply chain interruption losses with weather origins — but because they do not involve physical damage to the insured’s own property, standard BI does not respond.

Concentration risk is the third force. Mid-market companies that have optimized their supply chains for cost efficiency have frequently concentrated sourcing in single suppliers or single geographic regions. That concentration delivers cost savings in stable conditions and catastrophic vulnerability in disrupted ones. The pandemic demonstrated this at scale. The current geopolitical and weather environment is demonstrating it again, in slower motion, across a wider range of industries.

The Coverage Structures That Address Supply Chain Risk

Businesses with material supply chain exposure should consider three different coverage structures. Each responds to a different kind of loss, and the policy wording determines what is covered.

Contingent business interruption (CBI) may protect lost income when physical damage at a covered supplier’s or customer’s location interrupts your operations. A typhoon that damages a supplier’s factory is the type of event to examine under CBI. A tariff increase, on its own, generally is not. The supplier or customer, covered cause of loss, waiting period and applicable limit all matter.

Supply chain insurance may address selected interruptions that do not involve physical damage. Depending on the policy, these could include logistics disruption, supplier insolvency or certain political events. Coverage is less standardized than CBI, so businesses should compare the named triggers, exclusions, method of calculating losses and sublimits against their actual suppliers and shipping routes.

Trade credit insurance addresses receivables risk. If a customer cannot pay because of insolvency or prolonged default, a trade credit policy may protect the seller’s unpaid invoices, subject to its terms. It serves a different purpose from coverage for the seller’s own interruption. Allianz Trade

The Business Continuity Institute’s supply chain resilience research offers context for identifying disruption risks. For a broader view of geopolitical and economic threats, see the World Economic Forum’s Global Risks Report 2026. The World Economic Forum publishes that report. BCI

Tooher-Ferraris helps businesses assess these exposures and evaluate coverage as part of a commercial insurance program. Businesses with more specialized needs can also explore our specialty programs.

Frequently Asked Questions

What is contingent business interruption coverage and how does it differ from standard BI?

Standard business interruption requires physical damage to the insured’s own property as a trigger. Contingent business interruption extends coverage to income losses caused by physical damage at a supplier’s or customer’s location — a covered loss at a vendor facility that prevents the insured from operating. CBI does not cover non-physical interruptions such as tariff changes, geopolitical disruption, or supplier insolvency.

Does business interruption insurance cover supply chain disruption caused by tariffs?

Standard business interruption and contingent business interruption policies do not cover supply chain disruption caused by tariff changes, trade policy volatility, or geopolitical events because these are not physical loss triggers. Supply chain insurance, a distinct product class, can be structured to cover non-physical interruption triggers, but coverage terms, triggers, and availability vary significantly by carrier.

What is trade credit insurance and when does a business need it?

Trade credit insurance protects a business against non-payment by customers — specifically, losses arising from customer insolvency, protracted default, or in some policies, political risk affecting the customer’s ability to pay. It is relevant for businesses that extend meaningful credit terms to customers, particularly in industries or geographies where customer financial distress or supply chain disruption could impair payment capacity.

Ready to evaluate whether your business interruption coverage reflects your actual supply chain exposure? The team at Tooher-Ferraris has been helping businesses build complete commercial programs since 1932. Contact us today to schedule a no-obligation consultation.

Learn More
  • Construction

Builder’s Risk Coverage Is Getting Cheaper. Your Project Values Are Not. Here Is the Gap That Creates.

The builder’s risk market has softened. Rates in non-catastrophe-exposed zones are declining, capacity has returned, and contractors who shop their builder’s risk programs at renewal are seeing lower premiums than they did two or three years ago. This is genuinely good news and it is creating a dangerous blind spot. The softening rate environment is encouraging contractors to focus on what they pay rather than what they cover. Those two questions have diverged meaningfully since 2022.

Supply chain volatility and materials inflation have pushed average US project values approximately 14% higher since 2022, according to construction cost index data. A contractor whose builder’s risk program was structured around project values from two or three years ago likely carries limits that don’t reflect what a complete rebuild would cost today. The softening market means the premium for an underinsured limit may be lower than ever, making the gap between coverage and actual exposure easy to overlook until a total loss reveals it.

What Builder’s Risk Actually Covers and What It Does Not

Builder’s risk insurance is a course-of-construction policy that covers the structure under construction, materials intended to become part of the structure, and, in many cases, materials in transit to the site or stored temporarily off-site. It generally responds to physical loss or damage caused by covered perils, such as fire, windstorm, theft of materials incorporated or intended to be incorporated into the structure, and similar events.

What builder’s risk typically does not cover is where most contractor surprises originate at claim time. Contractor-owned tools and mobile equipment used on the job are almost universally excluded from builder’s risk policies. Those require separate inland marine or contractor’s equipment coverage. Design errors and faulty workmanship are generally excluded. Under some builder’s risk policies, coverage may apply to resulting damage to other parts of the structure, but not to the cost of correcting the original error or defective work. Earthquake and flood are standard exclusions in most markets, requiring separate endorsements or standalone policies. The collapse of an existing adjacent structure is frequently excluded unless the collapse is caused by a covered peril affecting the project itself.

The Three Coverage Elements Most Contractors Overlook

Ordinance or law coverage: When a partially completed or damaged structure must be brought into compliance with building codes in effect at the time of repair or reconstruction, the cost of that compliance is often not covered under a standard builder’s risk form. A contractor rebuilding a structure after a fire may be required to upgrade electrical systems, install sprinkler systems, or modify structural elements to meet current building codes. These upgrades can add costs equal to 10% to 25% of the rebuild value. Ordinance or law coverage, typically added by endorsement, can help address these additional expenses. Without it, the compliance cost falls to the project owner or the contractor, depending on the contract.

Soft costs coverage: A covered loss that interrupts construction generates costs beyond the physical damage: extended financing costs, additional architectural and engineering fees, permit re-application costs, and the carrying costs of a project that is not generating revenue while repairs are completed. These soft costs are not covered under a standard builder’s risk form. They are covered by a soft costs or delay in completion endorsement, which should be sized based on a realistic estimate of what a project interruption would actually cost the insured beyond the physical rebuild.

Completed value versus limit adequacy: Builder’s risk policies are typically written on a completed-value basis, meaning the insured limit should reflect the project’s total completed value at substantial completion rather than its value when coverage was originally bound. When material and construction costs increase significantly during the project, the completed value may exceed the original contract amount by a substantial margin. Reviewing the coverage limit against current project cost projections throughout construction, rather than only at policy inception, helps prevent a mid-project underinsurance gap from becoming a shortfall at claim time.

What Lenders Are Now Requiring

The underinsurance risk in the current market has not gone unnoticed by construction lenders. Lenders are now routinely requiring proof of adequate builder’s risk coverage as a condition of funding draws, and the definition of adequate has tightened to reflect current replacement costs rather than original contract amounts. A contractor whose builder’s risk limit was set at contract execution two years ago may be facing a draw funding delay if the lender’s current appraisal of replacement cost exceeds the covered limit.

Addressing this proactively by reviewing builder’s risk limits against current cost estimates before each draw request, rather than waiting for the lender to ask, can help prevent the project disruption that may result from a mid-construction coverage dispute.

Tooher-Ferraris helps contractors structure builder’s risk coverage around current project values, address common gaps with the right endorsements and coordinate protection with their broader commercial insurance program. Explore our specialty programs to learn more.

Ready to review your builder’s risk program against current project values? The team at Tooher-Ferraris has been helping contractors structure complete construction insurance programs since 1932. Contact us today to schedule a no-obligation consultation.

The Insurance Information Institute provides current builder’s risk market data and coverage guidance at iii.org. OSHA’s construction site safety resources, which affect claims frequency and loss control credit opportunities, are available at osha.gov.

Frequently Asked Questions

What does builder’s risk insurance cover?

Builder’s risk insurance covers physical loss or damage to a structure under construction, including materials intended to become part of that structure, from covered perils such as fire, windstorm, theft, and vandalism. It typically covers materials in transit to the site and in temporary off-site storage. It does not cover contractor-owned tools and equipment, design errors, faulty workmanship, or losses from earthquake and flood without specific endorsements.

Why do builder’s risk rates decrease while I should still review my limits?

Rate and limit are separate questions. A rate decrease means you are paying less per dollar of coverage. Limit adequacy is about whether your covered amount reflects what a complete rebuild would actually cost. If project values have increased because of materials inflation while the coverage limit remains unchanged, a rate decrease may simply reduce the premium on an underinsured limit. That creates savings on paper but can leave a significant coverage shortfall when a claim occurs.

What is soft costs coverage and do I need it?

Soft costs coverage, typically added by endorsement, helps cover additional expenses incurred by a project owner or contractor when a covered builder’s risk loss delays construction. These expenses may include extended financing costs, additional design fees, permit reapplication costs, and carrying costs during the repair period. Whether you need it depends on your contract structure and who bears the risk of these costs in the event of a project interruption. For larger projects with significant financing, soft costs coverage is almost always worth evaluating.

Learn More
  • Personal Lines

Surging Digital and Cyber Exposures: Why Personal Insurance Programs Have Not Kept Up

Personal insurance programs were designed when household risks were primarily physical, including fire, theft, severe weather, and liability for bodily injury or property damage. Today’s products, including homeowners, auto, umbrella, and scheduled personal property coverage, are refinements of insurance structures that have been in place for decades. Meanwhile, the digital economy has created an entirely new category of household risk in a relatively short period, and personal insurance coverage has not always kept pace.

The gap between digital exposure and insurance coverage continues to grow in 2026. S&P Global Ratings projects personal cyber insurance premiums to reach $23 billion by 2026, reflecting a market that was barely established a decade ago. This growth reflects both the expanding range of digital assets and activities households need to protect and the limited protection provided by many standard policies. Here are six digital and cyber exposures that many personal insurance programs may not adequately cover and why each deserves a closer review.

1. Cryptocurrency and Digital Asset Losses

Cryptocurrency holdings represent a significant store of value for a growing number of households, and standard homeowners policies were not designed to cover them. The classification of cryptocurrency as property, currency, or something else varies by jurisdiction and insurer. Most homeowners policies that cover theft of personal property were written before cryptocurrency existed and do not address losses from wallet compromise, exchange insolvency, or private key theft. Specialized digital asset coverage, offered by a small number of carriers and through dedicated digital asset custody programs, addresses this gap — but it requires explicit evaluation and placement, not an assumption that existing coverage extends to digital assets.

2. Social Engineering and Authorized Wire Transfer Fraud

Standard homeowners policies typically provide coverage for theft, meaning the unauthorized taking of covered property. Social engineering fraud involves a victim being deceived into voluntarily authorizing a transfer. The distinction is legally significant: when a homeowner is tricked by a deepfake voice call into authorizing a $200,000 wire transfer, the loss may not qualify as theft under a standard homeowners policy because the transfer was authorized. Personal cyber policies that include social engineering fraud coverage address this gap explicitly. The coverage limit, the deductible, and the specific definition of a covered social engineering event are all material coverage terms that vary across policies.

3. Ransomware and Extortion Targeting Household Systems

Ransomware attacks targeting households are an emerging source of personal cyber loss. These attacks can encrypt home computer systems, threaten to release personal data, or disable connected home systems and smart home infrastructure. Standard homeowners policies do not cover the ransom payment, the cost of professional incident response, or the data recovery costs associated with a ransomware attack. Personal cyber policies provide first-party coverage for these costs, including ransom payments (subject to legal restrictions), forensic investigation, data recovery, and crisis management services. The coverage is meaningfully different from standard homeowners identity theft coverage, which is typically limited to restoration costs rather than direct financial losses from extortion.

4. Online Account Takeover and Identity Restoration

Account takeover, the unauthorized access to financial, social media, email, or other online accounts, produces both direct financial losses and significant administrative costs of remediation. Freezing credit, disputing unauthorized transactions, notifying affected parties, restoring account access, and monitoring for subsequent misuse of compromised information requires time, professional assistance in complex cases, and sometimes legal support when identity theft has been used to commit fraud in the victim’s name. Standard homeowners policies often provide limited identity theft coverage, commonly with limits of $10,000 to $25,000. These limits may be sufficient for straightforward identity theft cases but can be inadequate for more complex account takeover situations involving multiple financial accounts, business accounts, or prolonged identity misuse.

5. Cyberbullying, Online Harassment, and Reputational Harm

Online harassment targeting household members, particularly younger family members, has emerged as a distinct category of personal cyber risk. Cyberbullying response coverage typically provides access to crisis counselors, reputation management services, and, in more serious cases, legal support for pursuing remedies against identified harassers. Standard homeowners and umbrella policies generally do not address these types of digital harms because they are designed primarily around physical property and liability risks.

The value of this coverage is not primarily financial. It provides access to professional resources and support during a situation that many families may not be equipped to manage on their own.

6. Smart Home and IoT Device Failure or Compromise

A connected home can create questions that are easier to answer when its insurance policies are reviewed together. If an internet outage disables a security system before a burglary, the theft claim would be evaluated under the homeowners policy’s terms. The system failure does not, by itself, determine whether the stolen property is covered.

An intentional breach raises a different set of questions. If someone compromises a smart home system and uses it to facilitate a burglary, the homeowners policy may address the stolen property, while a personal cyber policy may address eligible costs of investigating and responding to the breach. Some personal cyber policies offer protection for smart home compromises, but coverage varies. Reviewing the policies together helps identify applicable limits, exclusions and possible gaps before a loss occurs. Chubb

The risks extend beyond the home itself. The FBI’s Internet Crime Complaint Center annual reports track reported cybercrime, and the Identity Theft Resource Center’s reports on identity theft and data breaches offer additional insight into digital risks facing individuals and families. Internet Crime Complaint Center (IC3)

Tooher-Ferraris helps families evaluate digital exposure as part of their broader personal insurance program. Learn more about our additional personal insurance coverages and the tailored protection available through our Private Client Group. Tooher-Ferraris

Could a connected home create a gap in your coverage? Contact Tooher-Ferraris to schedule a no-obligation consultation.

Frequently Asked Questions

Does homeowners insurance cover cryptocurrency theft?

Most standard homeowners policies do not explicitly address cryptocurrency. The coverage outcome depends on how the insurer classifies cryptocurrency under the policy’s personal property definitions, the cause of loss (theft versus market loss), and whether the specific policy form has been updated to address digital assets. Specialized digital asset coverage, available from a limited number of carriers, provides explicit protection for cryptocurrency and other digital assets against covered causes of loss including theft and compromise.

What is the difference between identity theft coverage and personal cyber insurance?

Identity theft coverage, which is commonly included in homeowners policies or available as an endorsement, typically covers the administrative costs of restoring an individual’s identity after theft. Covered expenses may include credit bureau notifications, legal assistance, lost wages, and other related remediation costs. Personal cyber insurance is broader: it covers direct financial losses from social engineering fraud, ransom payments in extortion events, data recovery costs, crisis management services, and in some policies, cyberbullying response. The two coverages address different aspects of digital risk and in many cases both are worth carrying.

How much personal cyber coverage does a household need?

The appropriate limit depends on the household’s digital exposure profile: the value of digital assets held, the volume and value of financial transactions conducted electronically, the complexity of online account relationships, and the household’s tolerance for the administrative burden of managing a significant cyber incident without professional support. Households with significant cryptocurrency holdings, active online financial management, or multiple family members with active digital lives typically warrant higher limits than those with minimal digital footprints.

Learn More
Scroll to Top

By Appointment Only

Naples Office

By Appointment Only

New York Office

New York Office

New York Office

Connecticut Office

Facebook-f Linkedin-in X-twitter Instagram
Get A Quote
Skip to content