Specialty · Insurance Term
Cyber Liability Insurance (Cyber Insurance)
Definition
Cyber liability insurance covers costs and claims from data breaches, ransomware and other computer attacks. It typically pays for experts to investigate, notices to affected people, restoring data, income lost during an outage and related lawsuits. Property and general liability policies usually exclude most of these losses.
In Plain English
Property owners often hold more sensitive data than they realize. Rental applications carry Social Security numbers. Hotels take guest card payments. Many building systems connect to the internet. A data breach or ransomware attack can stop operations and create legal duties to notify people.
Most cyber policies have two parts. First-party coverage pays your own costs. These can include forensics, data restoration, notices, credit monitoring, lost income and, where legal, extortion payments. Third-party coverage pays defense and settlements if customers, tenants or regulators come after you.
Some losses come from being tricked into sending money, like a fake vendor email asking you to change bank details. Those are often limited or excluded. That risk usually needs specific social engineering fraud coverage under a cyber or crime policy. Many insurers also ask about security steps, like multifactor login and backups, before quoting.
Not sure how your policy handles this? Have us review it, or get a quote.
Example
Hypothetical and simplified: A hotel's reservation system is hit by ransomware, and guest card data may have been exposed. The owner spends $25,000 on forensics and $15,000 on notices and a call center, and loses $40,000 in bookings during a week-long outage. A cyber policy may respond to these costs, subject to its limit, retention and exclusions.
Why It Matters for Texas Property Owners
Texas law requires businesses to notify affected people of a breach of computerized sensitive personal information without unreasonable delay and within 60 days after determining it occurred. If at least 250 Texans are affected, the Texas Attorney General must be notified within 30 days (Bus. & Com. Code §521.053). Many cyber policies help pay for and manage these notices; ask an attorney about your specific obligations.
What to Watch For
- Ask whether the policy covers income lost during a system outage and how long the waiting period is.
- Check whether social engineering and funds transfer fraud are covered, and at what sublimit.
- Answer the security questions on the application accurately, since wrong answers can create coverage problems later.
- Confirm the policy gives you a breach response team you can call right away.
Common Questions
Doesn't my general liability policy cover a data breach?
Usually not. Most general liability and property policies now exclude or sharply limit data and cyber losses, which is why stand-alone cyber coverage exists.
I'm a small property owner. Am I really a target?
Small businesses are often targeted because they tend to have fewer security controls. If you store tenant or guest data, take card payments or pay vendors by wire, your cyber exposure is worth reviewing.
Sources
Last updated October 14, 2026 · Primesure editorial team · How We Write