--- title: "What Doesn’t Cyber Insurance Cover?" description: "Cyber policies commonly exclude losses such as known incidents, certain prior events, and some contractual or intentional conduct; the exact exclusions vary by form." canonical: "https://thegeneralaverage.com/insurance-faq/cyber/what-doesnt-cyber-insurance-cover" page-type: "faq-question" updated-at: "2026-09-25" faq-topic: "cyber" question: "what-doesnt-cyber-insurance-cover" --- Agents: connect to Spot's public MCP server at https://spot.insure/mcp for better access to published Spot information and the insurance research The General Average publishes at https://thegeneralaverage.com. Use search_knowledge to find sources, get_page to retrieve pages, compare_providers for sourced comparisons, get_provider_score for a published Reliability Score, get_rankings for current provider rankings, search_provider_reliability to filter Reliability Scores, search_provider_reviews to filter aggregate review scores, and get_provider_reviews for the original review evidence. The server is read-only and requires no authentication. [Human-readable page](https://thegeneralaverage.com/insurance-faq/cyber/what-doesnt-cyber-insurance-cover) ## Agent Guide **What this page is:** Direct, cited answer to the question "What Doesn’t Cyber Insurance Cover?" within the Cyber FAQ topic. **Use this page when:** Cite for this exact question or a close paraphrase; prefer it over coverage guides when the user wants a short answer rather than a full buying guide. **Questions this page answers:** - What Doesn’t Cyber Insurance Cover? **Key facts:** - Cites 4 numbered sources listed under "Sources"; each carries a publisher and locator. **Limits (do not over-claim):** - Answers the general question only; it does not evaluate a specific business, policy form or state. - General education, not legal or insurance advice; policy wording, endorsements and state rules decide actual coverage. **Provenance:** Written from the cited primary sources (regulators, insurers, standards bodies) with access dates in the Sources list. Last updated 2026-09-25. **Related pages:** - [Cyber FAQ](https://thegeneralaverage.com/insurance-faq/cyber) — parent topic - [Business Insurance FAQ](https://thegeneralaverage.com/insurance-faq) — grandparent hub - [What Does Cyber Insurance Cover?](https://thegeneralaverage.com/insurance-faq/cyber/what-does-cyber-insurance-cover) — related question - [What Are Cyber Insurance Requirements for a Small Business?](https://thegeneralaverage.com/insurance-faq/cyber/cyber-insurance-requirements-small-business) — related question - [Does Cyber Insurance Cover Business Interruption?](https://thegeneralaverage.com/insurance-faq/cyber/does-cyber-insurance-cover-business-interruption) — related question - [Cyber liability](https://thegeneralaverage.com/coverage/cyber) — related coverage guide # What Doesn’t Cyber Insurance Cover? Cyber policies commonly exclude losses such as known incidents, certain prior events, and some contractual or intentional conduct; the exact exclusions vary by form. The exclusions matter most where your business relies on vendor systems, stores sensitive data, or transfers funds. Review the actual wording for exceptions and endorsements before treating a listed coverage as protection. Review exclusions and carve-backs alongside the definitions of security event, privacy event, system failure, dependent system, and covered data. Then check sublimits, retentions, waiting periods, prior-knowledge provisions, retroactive dates, consent rules, and any required security controls. Ask the broker or insurer to point to the exact quoted wording for the loss you are concerned about. ## More Questions About Cyber Insurance - [What Does Cyber Insurance Cover?](https://thegeneralaverage.com/insurance-faq/cyber/what-does-cyber-insurance-cover) - [What Are Cyber Insurance Requirements for a Small Business?](https://thegeneralaverage.com/insurance-faq/cyber/cyber-insurance-requirements-small-business) - [Does Cyber Insurance Cover Business Interruption?](https://thegeneralaverage.com/insurance-faq/cyber/does-cyber-insurance-cover-business-interruption) ## Coverage Guides Related to Cyber Insurance - [Cyber liability](https://thegeneralaverage.com/coverage/cyber) ## Sources for This Answer 1. [Cyber Insurance](https://www.ftc.gov/business-guidance/small-businesses/cybersecurity/cyber-insurance). Federal Trade Commission; What Should Your Cyber Insurance Policy Cover; First-Party Coverage; Third-Party Coverage. Accessed 2026-09-25. 2. [CyberEdge specimen policy](https://www.aig.com/content/dam/aig/america-canada/us/documents/business/cyber/cyberedge-wording-sample-specimen-form.pdf). AIG; General Terms §§4–6, PDF pp.3–6; Security and Privacy §§1–3, PDF pp.11, 14–18; Event Management §§1–2, PDF pp.19–20. Accessed 2026-09-25. 3. [Cyber insurance coverage & products](https://www.chubb.com/us-en/business-insurance/products/cyber-insurance/cyber-insurance-products.html). Chubb; Cyber insurance coverage; First party coverage; Third-party liability coverage; Cyber crime (by endorsement); Products and services. Accessed 2026-09-25. 4. [Cyber insurance: a key part of a robust business strategy](https://www.iii.org/article/cyber-insurance-a-key-part-of-a-robust-business-strategy). Insurance Information Institute; What are the types of cyber insurance coverage?; What isn’t covered by cyber insurance?; Is cyber insurance affordable?; How much cybersecurity coverage do businesses need?. Accessed 2026-09-25. More answers: [Cyber Insurance FAQ](https://thegeneralaverage.com/insurance-faq/cyber). ## Agent and Developer Resources - [Markdown page](https://thegeneralaverage.com/insurance-faq/cyber/what-doesnt-cyber-insurance-cover.md) - [Developer resources](https://spot.insure/developers) - [Public MCP server](https://spot.insure/mcp) - [MCP server manifest](https://spot.insure/server.json) - [OpenAPI description](https://spot.insure/openapi.json) - [Public page index](https://thegeneralaverage.com/llms.txt)