What Insurance Covers Data Breaches?
Cyber insurance may cover breach investigation, notification, recovery, and some claims by affected people, depending on the event and policy terms.
The FTC lists forensic work, legal advice on notification, customer notices, call centers, data recovery, and interruption among possible first-party breach costs; third-party coverage may address consumer claims, settlements, litigation, and regulatory inquiries.
Check whether the policy includes data held by vendors and which security or privacy events trigger coverage. Compare limits and reporting deadlines for response expenses and liability; AIG’s specimen wording is one example of how forms define a covered event.
Coverage Guides Related to Cyber Insurance
Sources for Cyber Insurance Answers
- Cyber Insurance. Federal Trade Commission; First-Party Coverage; Third-Party Coverage; What Should Your Cyber Insurance Policy Cover. Accessed 2026-09-25.
- CyberEdge specimen policy. AIG; Security and Privacy Coverage Section, PDF pp.11–18, especially exclusions p.18; Cyber Extortion Coverage Section, pp.29–31. Accessed 2026-09-25.