The breach is rarely the expensive part. The response is.
Cyber liability covers breach response, ransomware, and the notification costs that follow an incident. Technology errors and omissions sits alongside it and covers your software or service failing a client.
Tell us the situation.
A licensed human replies the same business day — not an auto-responder, and not five producers calling at once. We shop it across our carriers and tell you if the policy you already have is the right one.
We use this to quote and service your insurance, and we do not sell it or pass it to lead networks. Privacy policy.
What cyber and technology businesses actually need.
Breach response
Forensics, legal advice, notification and credit monitoring after an incident.
Without it — Notification costs scale with the number of records and arrive before you know the cause.
Ransomware and extortion
Negotiation, ransom where lawful, and the cost of restoring systems.
Without it — A small business pays out of cash or stops trading, often both.
Business interruption
Lost income while systems are down.
Without it — A week offline costs the revenue and the customers who left during it.
Technology E&O
Claims that the software or service you provide failed and cost a client money.
Without it — A client’s outage caused by your product is a direct financial claim with nothing responding.
Where cyber and technology shows up.
- Restaurant
Card data and the POS are the target, and a breach brings notification costs the property policy does not touch.
- Professional Services
Client records are the asset. A breach means notification costs, regulators and a business that cannot operate.
- Medical & Dental Practices
Protected health information is the highest-value data there is, and a breach brings notification costs and regulators.
- Allied Health & Therapy Practices
Treatment notes are health records, and a breach carries notification duties whatever the size of the practice.
- Speech Therapy Practices
Evaluations and treatment notes on children are health records with notification duties attached.
- Occupational Therapy Practices
Clinical records are health data whatever the size of the practice.
- Physical Therapy Practices
Patient records and scheduling systems carry notification duties after a breach.
- Play & Behavioural Therapy
Records about children are the most sensitive data a small practice holds.
- Chiropractic Practices
Patient records and imaging are health data with breach notification duties attached.
- Concierge & Private Duty Nursing
Clinical records on high-profile clients are both health data and a reputational exposure.
What cyber and technology operators ask us.
We are tiny. Are we really a target?
Small businesses are targeted more, not less, because the attacks are automated and the defences are thinner. Nothing about a ransomware campaign is selective. The relevant question is not whether you are interesting but whether you could fund a forensic investigation and a notification exercise from cash.
Does my general liability cover a data breach?
No. Modern general liability policies carry explicit electronic data exclusions, and the ones that do not still require bodily injury or physical property damage, which a breach is not. The gap is deliberate on the insurer’s side rather than accidental.