Cyber insurance is a special insurance policy that covers your business’ losses and liability for intrusions into your business’s computers, computer networks, software, payment processing, and other information technology (cyber events). Cyber events that may be covered by cyber insurance include data breaches, malware, ransomware, viruses, spyware, wire transfer fraud, phishing, denial-of-service (DoS) attacks, Trojans, adware, botnets, man-in-the-middle attacks, credit card web skimming, and others.

In addition to breaching a business’s own valuable information and processes, a data breach may target a business’s sensitive customer information, such as credit card numbers, account numbers, telephone numbers, mailing addresses, passwords, driver’s license numbers, Social Security numbers, health records, and other personally identifiable information (PII).

In Wisconsin, as in other states, cyber insurance is designed to mitigate the risks associated with electronic business operations by providing coverage for various types of cyber events. This insurance typically covers the financial losses a business may suffer due to incidents like data breaches, malware, ransomware, and other cyber threats, as well as the liability for damages to third parties whose information may have been compromised. Wisconsin businesses that handle sensitive customer information, such as PII, are particularly at risk and may benefit from cyber insurance to protect against the financial and reputational costs of a cyber event. While there is no specific state statute in Wisconsin that mandates cyber insurance, businesses are subject to state data breach notification laws, which require them to notify affected individuals in the event of a data breach involving personal information. Cyber insurance can help businesses comply with these regulations and cover the associated costs. It's important for businesses to work with an attorney to understand the specific coverages and exclusions of a cyber insurance policy and ensure it aligns with their risk profile and regulatory obligations.