Insuring Your Business Against Cyber Liability

According to one study, 43% of data breaches involve small businesses. Another study found that the average cost of a data breach incident for a company with fewer than 500 employees is $2.98 million.¹

Business owners are required to protect their customers’ personal information. In all 50 states, Guam, Puerto Rico, The Virgin Islands, and the District of Columbia, businesses are required to notify individuals of security breaches involving personally identifiable information.²

As evidenced by news of large-scale data breaches, online hacking has become another form of risk that businesses now face every day. Like many risks, businesses can insure themselves against the financial damage a cyber-attack may inflict.

Cyber liability insurance may cover a range of risks, including:

• Data Breach Management: Pays expenses related to the investigation, management, and remediation of an incident, including customer notification, credit check support, and associated legal costs and fines.
• Media Liability: Covers third-party damages such as website vandalism and intellectual property rights infringement.
• Extortion Liability: Reimburses for expenses associated with losses arising from a threat of extortion.
• Network Security Liability: Covers costs connected with third-party damages due to a denial of access and theft of third-party information.

Cyber liability insurance is fairly new, so expect a wide divergence of coverage and costs. It may be purchased separately or as a rider to your current business insurance policy. Be prepared to comparison shop to get a better understanding of coverage and costs.

Small business owners might also keep in mind that “an ounce of prevention is worth a pound of cure.” There are steps you can take to protect your business from becoming a cyber victim.

Consider these steps to protect your data:

1. Maintain robust malware detection software and keep existing software updated.
2. Train employees not to open links contained in emails from unknown senders.
3. Encrypt your important data, such as bank account information, customer credit card numbers, etc.
4. Perform a security audit.

As obvious and simple as these precautions may sound, some businesses fall victim to cyber-attacks because of their failure to take them.

1. BusinessNewsDaily.com, January 17, 2024
2. FTC.gov, 2025

The content is developed from sources believed to be providing accurate information. The information in this material is not intended as tax or legal advice. It may not be used for the purpose of avoiding any federal tax penalties. Please consult legal or tax professionals for specific information regarding your individual situation. This material was developed and produced by FMG Suite to provide information on a topic that may be of interest. FMG Suite is not affiliated with the named broker-dealer, state- or SEC-registered investment advisory firm. The opinions expressed and material provided are for general information, and should not be considered a solicitation for the purchase or sale of any security. Copyright FMG Suite.