What Insurance Covers Cyber Attacks?

Cyber insurance can cover first-party response costs and third-party claims after covered cyber events, but the policy may include one side without the other.

A cyber policy’s security-event definition controls which attacks qualify.

Compare both coverage sections and their limits. An AIG specimen includes unauthorized access, denial-of-service attacks, and malicious code in its security-failure definition; check whether your quote uses those triggers and how it treats vendor incidents.

Sources for This Answer

  1. Cyber Insurance. Federal Trade Commission; First-Party Coverage; Third-Party Coverage; What Should Your Cyber Insurance Policy Cover. Accessed 2026-09-25.
  2. CyberEdge specimen policy. AIG; Security and Privacy Coverage Section, PDF pp.11–18, especially exclusions p.18; Cyber Extortion Coverage Section, pp.29–31. Accessed 2026-09-25.

Want someone to handle this for you?

Spot, which publishes this research, gets quotes from 50+ providers, picks the options that fit your coverage and budget, and manages renewals after you buy. The first consultation is free. Book a free consultation