

There are a number of ways companies may protect themselves, their personnel, their computer networks and their customers from a ransomware, or other form of malware, attack; and insurance, including cyberliability coverage, should be considered a key component of those protections. Indeed, many cyberliability insurers include, or offer as an option, coverage for “cyber extortion,” which may cover ransom payments to end a computer security threat, such as in the Los Angeles hospital case.

In addition, cyberliability insurance may cover a company’s costs to notify potentially affected persons and legal liability (including the costs of defending against claims) in the event that a malware attack results in the disclosure of confidential information. And the insurance is often designed to respond, whether the malware is introduced by an intrusion into the network by an outsider, or through the unwitting assistance of an employee or authorized person, such as in a “spearphishing” attack.

As the cyberliability insurance market continues to mature and evolve, policyholders should be aware of the scope of available coverage, and should seek assistance when negotiating new or renewal cyberliability insurance to ensure they obtain the most comprehensive coverage available to fit their needs.