Washington Cyber Liability Insurance: Breach Law & Cybercrime Data

Washington residents filed 18,009 internet crime complaints with the FBI in 2024 and reported $368,203,209 in losses. The state had 202,177 business establishments in 2023, 28% of them in health care, professional services, or finance, the sectors that hold the most sensitive data. Below are the state's numbers, its breach notification law, what moves a cyber quote, and guides for the largest cities.

Washington cyber risk at a glance

Measure	Washington	Source
IC3 internet crime complaints (2024)	18,009	FBI IC3
Reported internet crime losses (2024)	$368,203,209	FBI IC3
Complaints per 100,000 residents (2024)	226.3	FBI IC3
Business establishments (2023)	202,177	Census CBP
Health care and social assistance establishments	23,923	Census CBP
Professional, scientific, and technical establishments	23,574	Census CBP
Finance and insurance establishments	9,829	Census CBP
Share of establishments in these three sectors	28%	Census CBP
Establishments with fewer than 5 employees	56%	Census CBP
Workers who work from home	20%	Census ACS

Sources: FBI Internet Crime Complaint Center (IC3), 2024 Internet Crime Report; U.S. Census Bureau, County Business Patterns 2023: all industries, health care and social assistance (NAICS 62), professional, scientific, and technical services (NAICS 54), and finance and insurance (NAICS 52); U.S. Census Bureau, American Community Survey 5-year estimates, 2020–2024 (tables B08301, B25003, B25024, B25035), via Census Reporter.

Washington data breach notification law

When personal information about Washington residents is compromised, notice is governed by RCW 19.255 (personal information breach notification). The statute defines personal information, sets the timing and content of notices, and in some cases requires notice to the attorney general. Affected people in other states bring their own laws into play. Our breach notification guide compares the ten states we serve.

What moves a Washington cyber quote

Revenue and size of the business.
Industry, especially health care, finance, and professional services.
Records held: volume and type of personal, health, and payment data.
Security controls: MFA, endpoint detection and response, backups, and patching.
Limits, retention, and waiting period you choose.
Coverage options such as social engineering and dependent business interruption.
Prior incidents and claims.

See cost factors and security controls insurers look for.

City guides for Washington

Coverage and guides

More Washington communities

We accept cyber insurance requests from businesses anywhere in Washington. Other communities, grouped by county:

King County: Yarrow Point, Woodinville, Snoqualmie, Skykomish, SeaTac, Pacific, North Bend, Normandy Park, Newcastle, Mercer Island, Medina, Maple Valley, Lake Forest Park, Kenmore, Issaquah, Hunts Point, Enumclaw, Duvall, Des Moines, Covington, Clyde Hill, Carnation, Black Diamond, Beaux Arts Village, Algona

Pierce County: Wilkeson, University Place, Sumner, Steilacoom, South Prairie, Ruston, Roy, Orting, Milton, Gig Harbor, Fircrest, Fife, Edgewood, Eatonville, DuPont, Carbonado, Buckley, Bonney Lake

Whitman County: Uniontown, Tekoa, St. John, Rosalia, Pullman, Palouse, Oakesdale, Malden, Lamont, LaCrosse, Garfield, Farmington, Endicott, Colton, Colfax, Albion

Snohomish County: Woodway, Sultan, Stanwood, Snohomish, Mukilteo, Mountlake Terrace, Monroe, Mill Creek, Lake Stevens, Index, Granite Falls, Gold Bar, Darrington, Brier, Arlington

Grant County: Wilson Creek, Warden, Soap Lake, Royal City, Quincy, Moses Lake, Mattawa, Krupp, Hartline, Grand Coulee, George, Ephrata, Electric City, Coulee City

Okanogan County: Winthrop, Twisp, Tonasket, Riverside, Pateros, Oroville, Omak, Okanogan, Nespelem, Elmer City, Coulee Dam, Conconully, Brewster

Yakima County: Zillah, Wapato, Union Gap, Toppenish, Tieton, Sunnyside, Selah, Naches, Moxee, Mabton, Harrah, Granger, Grandview

Spokane County: Waverly, Spangle, Rockford, Millwood, Medical Lake, Liberty Lake, Latah, Fairfield, Deer Park, Cheney, Airway Heights

Grays Harbor County: Westport, Ocean Shores, Oakville, Montesano, McCleary, Hoquiam, Elma, Cosmopolis, Aberdeen

Lewis County: Winlock, Vader, Toledo, Pe Ell, Napavine, Mossyrock, Morton, Chehalis, Centralia

Lincoln County: Wilbur, Sprague, Reardan, Odessa, Harrington, Davenport, Creston, Almira

Skagit County: Sedro-Woolley, Mount Vernon, Lyman, La Conner, Hamilton, Concrete, Burlington, Anacortes

Clark County: Yacolt, Washougal, Ridgefield, La Center, Camas, Battle Ground

Stevens County: Springdale, Northport, Marcus, Kettle Falls, Colville, Chewelah

Whatcom County: Sumas, Nooksack, Lynden, Ferndale, Everson, Blaine

Adams County: Washtucna, Ritzville, Othello, Lind, Hatton

Chelan County: Wenatchee, Leavenworth, Entiat, Chelan, Cashmere

Cowlitz County: Woodland, Longview, Kelso, Kalama, Castle Rock

Douglas County: Waterville, Rock Island, Mansfield, East Wenatchee, Bridgeport

Kittitas County: South Cle Elum, Roslyn, Kittitas, Ellensburg, Cle Elum

Pend Oreille County: Newport, Metaline Falls, Metaline, Ione, Cusick

Thurston County: Yelm, Tumwater, Tenino, Rainier, Bucoda

Pacific County: South Bend, Raymond, Long Beach, Ilwaco

Walla Walla County: Walla Walla, Waitsburg, Prescott, College Place

Benton County: West Richland, Prosser, Benton City

Clallam County: Sequim, Port Angeles, Forks

Franklin County: Mesa, Kahlotus, Connell

Island County: Oak Harbor, Langley, Coupeville

Kitsap County: Poulsbo, Port Orchard, Bainbridge Island

Klickitat County: White Salmon, Goldendale, Bingen

Asotin County: Clarkston, Asotin

Columbia County: Starbuck, Dayton

Skamania County: Stevenson, North Bonneville

Ferry County: Republic

Garfield County: Pomeroy

Jefferson County: Port Townsend

Mason County: Shelton

San Juan County: Friday Harbor

Wahkiakum County: Cathlamet

Cyber insurance in Washington: FAQ

What is Washington's data breach notification law?

RCW 19.255 (personal information breach notification). Businesses must also consider the laws of other states where affected individuals live.

How much internet crime is reported in Washington?

The FBI's IC3 received 18,009 complaints from Washington in 2024, with $368,203,209 in reported losses.

Who regulates cyber insurers in Washington?

Insurance companies are regulated by the Washington Office of the Insurance Commissioner.

How do I get cyber insurance in Washington?

Gather your business details, data inventory, and security controls, then request quotes. Insurers price each business individually after underwriting.

Sources

FBI Internet Crime Complaint Center (IC3), 2024 Internet Crime Report
U.S. Census Bureau, County Business Patterns 2023: all industries, health care and social assistance (NAICS 62), professional, scientific, and technical services (NAICS 54), and finance and insurance (NAICS 52)
U.S. Census Bureau, American Community Survey 5-year estimates, 2020–2024 (tables B08301, B25003, B25024, B25035), via Census Reporter
U.S. Census Bureau Vintage 2024 city population estimates
Washington Office of the Insurance Commissioner

Start a Washington cyber quote

Last updated October 15, 2026 · How we research

Cyber liability insurance in Washington