Coverage Guide — Updated August 2026
Cyber Insurance for Small Business
Cyber insurance protects your business from the financial fallout of data breaches, ransomware attacks, and cyber-related business interruptions. 43% of cyberattacks target small businesses — and the average cost of a small business data breach now exceeds $200,000.
Backed by Munich Re. 750,000+ businesses insured. Get your certificate of insurance instantly.
Cyber insurance protects your business from the financial fallout of data breaches, ransomware attacks, and cyber-related business interruptions. 43% of cyberattacks target small businesses — and the average cost of a small business data breach now exceeds $200,000.
What It Covers ✓
- ✓Data breach response costs (notification, forensics, credit monitoring)
- ✓Ransomware payments and extortion expenses
- ✓Business interruption from a cyber event
- ✓Data restoration and system recovery costs
- ✓Cyber liability to third parties whose data was compromised
- ✓Legal defense for regulatory investigations
- ✓Regulatory fines where insurable
- ✓Crisis management and public relations costs
What It Does NOT Cover ✗
- ✗Physical property damage from a cyber event (commercial property)
- ✗Prior known incidents or breaches before policy inception
- ✗Intentional acts or criminal conduct by the insured
- ✗Social engineering / wire transfer fraud (requires endorsement)
- ✗Intellectual property infringement claims
Who Needs Cyber Insurance?
- →Any business storing customer data (names, emails, payment info)
- →E-commerce businesses processing online payments
- →Medical and dental practices (HIPAA covered entities)
- →Professional services firms with client data
- →Retailers using point-of-sale (POS) systems
- →Businesses using cloud-based software
- →Any business with remote employees accessing company networks
How Much Does It Cost?
Solo practitioner / very small
$500–$1,500/yr
Small business (10–50 employees)
$1,000–$5,000/yr
Mid-size with sensitive data
$3,000–$15,000+/yr
Healthcare / financial services
Varies by revenue and data
Key Terms to Know
First-Party Coverage
Covers YOUR direct losses from a cyber event — breach response, ransomware payments, business interruption, and system restoration.
Third-Party Liability
Covers claims from others whose data was compromised in your breach — clients, patients, or customers suing for damages from your incident.
Retroactive Date
Claims-made cyber policies only cover incidents after this date. Make sure your retroactive date aligns with when you first began storing data.
Social Engineering
Phishing and business email compromise (BEC) scams that trick employees into wiring money — typically excluded from base cyber policies and requiring a specific endorsement.
Waiting Period
The time between a cyber incident and when business interruption coverage activates — typically 8–12 hours. Downtime losses during the waiting period are not covered.
Get Cyber Insurance Today
Instant certificate. A+ AM Best rated. Online in 10 minutes.