Does General Liability Cover Cyber Attacks?

Generally no for the main costs of a cyberattack; CGL electronic-data exclusions leave incident response and recovery to separate coverage.

The ISO specimen excludes damages from loss, damage, corruption, or inaccessibility of electronic data. A claim alleging bodily injury or physical property damage would need separate review under the policy.

Ask your broker to match forensic response, data restoration, extortion, customer notification, privacy claims, and interruption to the cyber policy. Check its triggers, waiting periods, security conditions, sublimits, and exclusions.

Sources for This Answer

  1. Commercial general liability insurance. Insurance Information Institute; What commercial general liability insurance covers; Coverage A, B and C; Additional liability coverages to consider. Accessed 2026-09-25.
  2. Commercial General Liability Coverage Form, CG 00 01 12 07. ISO; specimen hosted by Hiscox; Coverage A I.A pp.1–5; Coverage B I.B pp.6–7; Who Is An Insured II pp.9–10; Limits III p.10; Conditions IV pp.10–12; Definitions V pp.12–16. Accessed 2026-09-25.

Want someone to handle this for you?

Spot, which publishes this research, gets quotes from 50+ providers, picks the options that fit your coverage and budget, and manages renewals after you buy. The first consultation is free. Book a free consultation