Coverage Overview
In today's digital landscape, Connecticut businesses face unprecedented cyber risks. From data breaches to ransomware attacks, the financial and reputational damage from cyber incidents can be devastating. Our cyber insurance policies provide comprehensive protection against these modern threats, with coverage tailored to your business's specific needs and exposures.
Coverage for data breaches affecting customer, employee, or partner information
Protection against ransomware and cyber extortion demands
Business interruption coverage for system downtime caused by cyber attacks
Access to incident response teams and cybersecurity experts
What Our Cyber Insurance Covers
We offer comprehensive cyber insurance policies customized for Connecticut businesses, with protection against today's most common and costly cyber threats.
Data Breach Coverage
Financial protection for the costs associated with a data breach, including notification, credit monitoring, and regulatory fines.
Cyber Liability
Coverage for legal costs if your business is sued due to a data breach or other cyber incident that compromises customer information.
Business Interruption
Compensation for lost income if your business operations are disrupted by a cyber attack or system failure.
Cyber Extortion
Protection against ransomware and other cyber extortion threats, including ransom payments and recovery expenses.
System Damage
Coverage for the cost to restore or replace data and software following a cyber attack or other covered incident.
Incident Response
Access to cybersecurity experts, legal advisors, and PR professionals to help manage and recover from cyber incidents.
Connecticut-Specific Considerations
Connecticut businesses face specific regulatory requirements and cyber risks that must be addressed in your insurance coverage.
Data Breach Notification
Connecticut law requires businesses to notify affected residents and the state Attorney General following certain data breaches. Our policies help cover the costs of compliance.
Industry Requirements
Connecticut healthcare providers, financial institutions, and government contractors face additional regulatory requirements. We provide industry-specific cyber coverage options.
Local Threat Landscape
Connecticut businesses are increasingly targeted by cyber criminals. Our policies are designed with awareness of the current threat landscape affecting local organizations.
What a Real Cyber Program Specifies
Two cyber policies with the same headline limit can respond very differently to the same incident. The terms below are where that difference lives — and what a proper program review examines line by line.
Ransomware Sublimits and Coinsurance
Many policies cap ransomware and cyber-extortion losses at a sublimit well below the full policy limit, and some add coinsurance — a percentage of every extortion loss you retain yourself. A policy with a large headline limit can still leave the bulk of a ransomware event uncovered if the sublimit and coinsurance terms are restrictive.
Retention Structure and Waiting Periods
The retention (deductible) may apply once per incident or separately to each coverage part, which changes what a multi-part event actually costs. Business interruption coverage adds a time-based retention: a waiting period of a set number of hours of downtime before loss-of-income coverage begins. For businesses where revenue stops the moment systems do, the length of that waiting period matters more than the BI limit itself.
Social Engineering and Funds Transfer Fraud
Losses from deception — an employee tricked into wiring funds or changing payment instructions — are usually covered under a separate insuring agreement with its own, often much lower, sublimit. Some forms also condition coverage on verification procedures, such as calling back a known number before transferring funds. This is one of the most frequent sources of claim disputes in cyber.
Exclusions and Panel-Vendor Response
War and infrastructure exclusions define whether state-linked attacks or failures of power, telecom, or cloud providers are outside the policy — wording that varies widely between carriers. Just as important is the carrier's response panel: the pre-approved breach counsel, forensics firms, and negotiators the policy requires or provides. In the first hours of an incident, the quality and availability of that panel often determines the outcome as much as any limit.