★ Commercial · Cyber liability

One breach. Six figures. Before lunch.

A small-business data breach routinely costs well into six figures: forensics, notification letters, credit monitoring, lost income, and the lawsuit after. Cyber liability pays those costs and covers your liability when customer data is exposed. If you store customer information, you have cyber exposure.

  • Data breach response
  • Ransomware
  • Business interruption
  • Regulatory fines
  • Social engineering fraud

Free quotes · No obligation · A licensed specialist answers, usually within one business day

★ What it covers

What’s covered and what isn’t.

Plain English, no fine-print games. Every policy has exclusions; here are the ones that actually matter for Cyber Liability.

What it covers

  • Breach response costsForensics to find out what happened, legal guidance, customer notification, and credit monitoring. The first bills after a breach.
  • Business interruptionLost income when ransomware or a system outage shuts you down.
  • Ransomware and extortionExtortion payments and recovery costs, within policy terms and the law.
  • Third-party liabilityLawsuits from customers or partners whose data was exposed in your breach.
  • Regulatory fines and penaltiesDefense costs and many fines under privacy laws, where insurable by law.
  • Social engineering fraudFunds-transfer fraud and phishing losses, usually as a sublimit, so read it.

What it doesn’t cover

  • Bodily injury and property damageCyber is a financial-loss policy, not a casualty policy.
  • Known unpatched vulnerabilitiesMisrepresenting your security on the application can void coverage. Answer the security questions honestly.
  • Future profits beyond policy termsInterruption coverage has time and dollar caps. It bridges the outage, not the next five years.
  • Acts of war and some nation-state attacksWar exclusions are actively litigated in cyber; ask what your specific policy says.
  • Fines for willful non-compliancePenalties for knowingly breaking the law are not insurable.

All quotes are subject to carrier underwriting and final approval. Coverage availability, terms, and pricing vary by state and carrier. The lists above describe typical Cyber Liability policies, not any specific carrier’s form.

Six figures all-in is routine, which is why the premium looks small next to the exposure.

Our answer to “How much does a small-business breach actually cost?”

★ Who needs it

If this sounds like you, you need cyber.

The businesses that buy Cyber Liability most, and the one-line reason each one does.

Healthcare and medical practices

Patient data is regulated and valuable. Breach costs run highest here.

Financial services and insurance agencies

You hold Social Security numbers and bank accounts, and your clients' trust.

Retailers and restaurants

Every card transaction is exposure; PCI fines follow breaches.

Professional services

Law firms, accountants, consultants: you hold client confidences.

Any business with a customer database

If a spreadsheet of customer emails would hurt to lose, you have the exposure.

★ What it costs

What drives the price.

Carriers price Cyber Liability on exposure, not vibes. Here’s what moves your number, and what you can actually influence.

  • Records count: How many customer records you hold. More records means more notification cost and more premium.
  • Revenue: Bigger revenue usually means bigger interruption exposure.
  • Security controls: MFA, backups, endpoint protection, and an incident response plan earn real credits. Some carriers will not quote without MFA.
  • Industry: Healthcare and financial services rate highest; low-data trades rate lowest.
  • Limits and sublimits: $1M is a common starting point; ransomware and social engineering often carry sublimits. Read them before you buy.

★ Straight answers

Questions cyber buyers actually ask.

The short version of what our licensed specialists explain on calls every week.

I have antivirus and backups: do I still need cyber insurance?
Controls reduce how often breaches happen, not what they cost when they do. One successful phishing email can still trigger forensics, notification, and a lawsuit that controls alone do not pay for. Carriers actually reward good controls with better pricing. They do not consider them a substitute.
Does cyber insurance cover ransomware payments?
Most policies cover extortion payments and recovery costs within policy terms, and carriers bring their own breach-response teams. There are legal constraints on paying certain threat actors, which is why you call the carrier's hotline first, not after.
What is the difference between first-party and third-party cyber coverage?
First-party pays your own costs: forensics, notification, interruption, extortion. Third-party pays claims others bring against you: customer lawsuits and regulatory actions. A real cyber policy includes both.
Will a carrier really ask about my MFA?
Yes. Multi-factor authentication is now a near-universal requirement for quoting cyber. No MFA, no quote from most markets. It is the single cheapest security upgrade you can make.
Does general liability cover data breaches?
No. GL covers bodily injury and property damage to third parties. A data breach is neither, which is exactly why cyber exists as its own line.
How much does a small-business breach actually cost?
Forensics alone often runs five figures; notification, call centers, and credit monitoring scale per affected record; and the lawsuit or regulatory action comes after. Six figures all-in is routine, which is why the premium looks small next to the exposure.

Get my quote

Get your Cyber Liability quote. Two minutes.

Tell us about the business. A licensed specialist shops the carriers and comes back with real options.

  • About 2 minutes, built for Cyber Liability
  • A licensed specialist follows up, usually within one business day
  • No bait prices, no call centers, no selling your information

Free quotes. No obligation. Written through Patriot Independent Insurance Partners, licensed in TX, FL, GA, SC, AL, MS, NC, CA, and CO. Your information is never sold to lead brokers.

Request your Cyber Liability quote

Direct to Patriot licensed agents only. Never sold, never brokered.

Additional details (optional, speeds up your quote)

Takes about a minute. No spam, no robocalls. We never sell your information.

Call (912) 349-7731Text (913) 521-5793Get my quote