The evolving market for cyberliability insurance coverage reveals significant differences in the scope of coverage afforded under available policies. A coverage gap that may exist under some policies is for insider cyber attacks. While external attacks receive substantial news coverage, a recent study finds that businesses may be far less equipped to stave off attacks involving insiders: employees, vendors, suppliers and others who may have authorized access to critical or sensitive data. Liability insurance protection – even under specialized cyberliability policy forms – may potentially lag behind on this important issue. Differences in policy language – including policy definitions and exclusions – may have a significant impact on the scope of coverage available for a cyberliability claim. It is therefore critical to understand the coverage provided under your company’s cyberliability policy in response to insider attacks or data breaches.

Brian Himmel and Andrew Moss are partners in the Reed Smith Insurance Recovery Group and co-leaders of the Group’s Cyberliability practice area. Rob Owen is an associate in the Insurance Recovery Group. Companies considering cyberliability coverage or interested in determining whether certain types of claims may be included as an insured risk under a particular policy form should contact Brian, Andrew or Rob to address questions regarding their specific cyberliability coverage needs.