Cyber liability for when the systems go down.

Cyber cover is one of the few policies where the first-party costs — what the incident does to you — usually exceed the third-party liability. A ransomware event closes a business for days, requires specialist forensics, triggers notification obligations under Texas law, and only then produces claims from the people whose data was exposed.

First-party and third-party are different halves

First-party cover pays your own costs: incident response, forensic investigation, data restoration, business interruption while systems are down, and any ransom payment where the policy permits it. This is the half most businesses actually claim on.

Third-party cover responds to claims from others — customers whose data was exposed, regulators, payment card networks. Both halves matter, but a policy weighted only toward liability leaves you funding the response yourself.

Texas notification obligations

Texas requires businesses to notify individuals whose sensitive personal information was compromised, and to do so without unreasonable delay. Where a breach affects a large number of Texans, the Attorney General must also be notified.

Notification is not cheap. Identifying who was affected, producing and sending notices, and standing up credit monitoring costs real money before a single claim is made against you. That is precisely what breach response cover is for.

Social engineering is often excluded

The most common loss small businesses actually suffer is not a sophisticated intrusion. It is an employee wiring money after a convincing email. That is social engineering or funds transfer fraud, and many cyber policies exclude it or apply a sub-limit far below the main limit.

If you make payments on emailed instructions — and almost every business does — check this specifically. It is usually available as an endorsement and it is the cover most likely to be used.