Cyber insurance for data breaches and attacks.

Coverage that can help protect a business against losses from a cyberattack. The two main types are first-party coverage, for your own losses, and third-party coverage, for claims against you.

Typically legal counsel on notification and regulatory duties, recovering lost or stolen data, customer notification and call center services, lost income from business interruption, crisis management, cyber extortion and fraud, forensic investigation, and fees, fines and penalties tied to the incident.

Typically payments to consumers affected by a breach, claim and settlement expenses, losses tied to defamation or copyright or trademark infringement, litigation and regulatory response costs, and other settlements, damages and judgments.

The FTC suggests checking for data breaches, attacks on your data held by vendors and other third parties, attacks on your network, attacks anywhere in the world, and terrorist acts.

Whether the insurer will defend you in a lawsuit or regulatory investigation (look for “duty to defend” wording), whether coverage sits in excess of your other insurance, and whether there is a breach hotline available at all times.