Cyber Liability Coverage Needs Calculator (2026)

IBM's 2024 Cost of a Data Breach study put the global average breach at $4.88M — $9.36M in the United States — and $165 per record exposed. Healthcare breaches average $260/record because of HIPAA fines. Cyber liability insurance covers forensics, breach notification, credit monitoring, business interruption, ransomware payments, regulatory fines, and third-party lawsuits.

What A Cyber Policy Pays For

First-party: forensics ($50K-$500K typical), customer notification (mandatory under state breach-notification laws), credit monitoring (1-2 years), business interruption (lost revenue during downtime), ransomware payments, data restoration. Third-party: defense costs for regulatory investigations, settlements with affected customers, defense of class-action lawsuits. Add-ons: social engineering fraud sub-limit (wire transfer scams), PCI fines (if you process cards), media liability (defamation, copyright).

What Carriers Now Require

Cyber underwriting tightened dramatically since 2021. Most carriers now require: MFA on all admin and remote access accounts, EDR (endpoint detection and response) tools on all endpoints, tested backups with offline/immutable copies, written incident response plan, security awareness training for staff, and patch management evidence. Without these controls, expect coverage denials, 50-100% premium loadings, or sub-limits on ransomware coverage. Best practice: complete the application honestly — misrepresentations void coverage at the worst possible moment.

Last updated May 2026. Sources: III Cyber Insurance.