Cyber insurance guide
Third-party cyber liability
Third-party cyber liability covers claims made against your business by people or organizations harmed by a security failure or privacy event.
Typical insuring agreements
- Network security liability: claims arising from a failure of your security, such as transmitting malware or a denial-of-service attack launched from your systems
- Privacy liability: claims for failing to protect personal or confidential information
- Regulatory defense and penalties where insurable, for proceedings brought by government agencies
- Media liability: claims arising from content you publish online
- Payment card industry (PCI) assessments and fines under merchant agreements, often sublimited
Who brings these claims
Claimants include customers whose data was exposed, business clients whose systems were affected, card brands and processors seeking PCI assessments, and state attorneys general enforcing breach and privacy laws. Defense costs can be significant even when a claim is ultimately dismissed.
Defense inside or outside the limit
Most cyber policies pay defense costs within the limit, meaning legal fees reduce the amount left for settlements. Ask how defense is handled, whether you choose counsel, and whether consent to settle provisions apply.
Contracts can require it
Clients increasingly require vendors to carry cyber liability with set limits and sometimes to name them as additional insureds. Review contract insurance clauses before you sign so your policy matches.
Frequently asked questions
What does third-party cyber liability cover?
Defense and damages when others sue or bring claims because of a security failure or privacy event at your business, such as a breach of their personal information.
Does it cover lawsuits from clients?
Network security and privacy liability typically covers claims by clients and others whose data was exposed or who were harmed by malware spread from your systems, subject to policy terms.
Is media liability part of cyber?
Many cyber policies include media liability for claims such as defamation or copyright infringement in your online content.
More coverage and guides
- First-party cyber coverage
- Third-party cyber liability
- Ransomware and cyber extortion coverage
- Social engineering and funds transfer fraud
- Cyber business interruption
- Regulatory defense and PCI coverage
- Data breach notification laws by state
- Security controls cyber insurers look for
- Cyber insurance application checklist
- What affects cyber insurance cost
- Building a cyber incident response plan
Last updated October 15, 2026 · How we research