Does Commercial Umbrella Cover Cyber Insurance?

A generic umbrella limit does not establish cyber protection; confirm whether cyber is scheduled and whether the claim fits the wording. Its description as “umbrella” or “excess” does not establish that a cyber policy is included or that a cyber claim will attach. The California Department of Insurance says an umbrella may provide additional coverage beyond an underlying policy, but this possibility depends on the contract and does not answer whether cyber risk is included.

Cyber insurance and umbrella liability also address different policy arrangements. The schedule may identify general liability, auto, or employers’ liability and omit a cyber policy; exclusions and definitions may further affect the result. The public guidance does not establish a universal cyber rule for all umbrella forms.

Check the actual schedule for the cyber policy and read the insuring agreement, exclusions, attachment language, and any separate excess cyber endorsement. Ask the broker to confirm in writing whether the relevant privacy, network security, or incident response claim can reach the umbrella, and what underlying limit or retention applies.