What Cyber Insurance Requirements Apply in Alaska?

Alaska’s breach-notice rule applies when a covered person owns or licenses personal information about an Alaska resident and a breach occurs in the information system that contains it. Required resident notice must be made in the most expeditious time possible without unreasonable delay, allowing time to determine scope and restore system integrity; the law sets no fixed day count. For more than 1,000 Alaska residents, nationwide consumer reporting agency notice also applies, except for an information collector subject to GLBA.

What Is Cyber Insurance?

Cyber insurance can help pay covered response costs and claims against your business after a cyber incident. If your business relies on data, software or outside providers, compare response limits, vendor outages and approval rules. Read the national Cyber liability guide.

What Should You Watch for With Cyber Insurance in Alaska?

  • No Fixed Number of Days

    For a breach of an information system containing personal information about an Alaska resident, the covered person must disclose to each resident whose information was subject to the breach. The information collector must do so in the most expeditious time possible and without unreasonable delay, allowing time to determine scope and restore system integrity. Ask the response provider how it documents those steps and applies the covered-person and information-collector roles. 1,2

  • Credit Bureaus Join Above 1,000 Residents

    If AS 45.48.010 requires notice to more than 1,000 Alaska residents, the information collector must also notify nationwide consumer reporting agencies without unreasonable delay and provide the timing, distribution, and content of resident notices. This subsection does not apply to an information collector subject to GLBA. Confirm your response service checks that exception and handles any required coordination. 2

  • A No-Harm Finding Needs Written Notice to the AG

    You may omit resident notice only after an appropriate investigation, written notice to the Alaska Attorney General, and a determination that harm is not reasonably likely. Document the determination and retain it for five years; ask whether your response team can prepare and preserve that record. 2

  • Law Enforcement Can Delay Notice

    An appropriate law-enforcement agency may delay disclosure after determining that it would interfere with a criminal investigation; the statute does not require an initial written request. Notice resumes as soon as possible without unreasonable delay after the agency informs the information collector in writing that disclosure will no longer interfere. Ask who will track the agency determination and written release. 2

Which Cyber Insurance Providers Have Alaska License Records?

These providers publish a national listing for Cyber liability; the license records below name the licensed entities and roles. Some records rely on company-reported information rather than independent regulator verification. A national listing does not confirm the product is available in Alaska. Check the regulator’s license lookup and confirm state availability for your business when requesting a quote.

  • At-Bay

    Insurance producer, Surplus-lines broker · checked 2026-09-28

    At-Bay Insurance Services LLC

    At-Bay’s license page lists P&C producer and surplus-lines broker license numbers for all 50 states and the District of Columbia. These are company disclosures and do not establish product availability in each jurisdiction. 11

    At-Bay offers primary and excess cyber insurance for businesses with revenue up to $5 billion.

  • Coalition

    Insurance producer, Surplus-lines broker · checked 2026-09-28

    Coalition Insurance Solutions, Inc.

    Coalition’s license page lists producer and surplus-lines licenses for Coalition Insurance Solutions, Inc. in all 50 states and the District of Columbia. The page separately lists insurers; this record covers the brokerage entity only. 12

    Coalition offers cyber insurance.

  • Corgi

    Insurance producer · checked 2026-09-28

    Corgi Insurance Services, Inc.

    Corgi’s company producer-license table lists 50 jurisdictions: 49 states and the District of Columbia, including DC license 3003091619. New Mexico does not appear in the table and is not included here; the omission does not establish that Corgi is unlicensed there. The company-reported table has no stated as-of date and does not establish product availability. 13

    Corgi lists cyber insurance among its business insurance offerings.

  • Hiscox

    Insurer · checked 2026-09-28

    Hiscox Insurance Company Inc.

    Hiscox’s U.S. company information states that Hiscox Insurance Company Inc. is licensed in all 50 states and the District of Columbia. This is company-reported insurer authority for this entity and does not establish which company issues every Hiscox-branded product. 14

    Hiscox offers cyber insurance for small businesses.

  • TechInsurance

    Insurance producer · checked 2026-09-28

    Specialty Program Group LLC

    TechInsurance’s current licensing page names Specialty Program Group LLC / SPG Insurance Solutions and lists state license numbers, but labels Rhode Island “Individual licenses” rather than identifying a license for the named agency. RI is omitted because this disclosure does not establish agency authority there; this is a search limitation, not an assertion that the company is unlicensed. The remaining state entries are company-reported and are not an insurance product availability map. 16

    TechInsurance arranges cyber insurance for small businesses.

  • Vouch

    Insurance producer, Surplus-lines broker · checked 2026-09-28

    Vouch Specialty Insurance Services, LLC

    Vouch’s licenses page, effective January 16, 2025, lists producer licenses in all 50 states and DC. Its separate surplus-lines table includes Idaho number 870820, while a footnote says Georgia and Idaho do not issue agency-level surplus-lines licenses. Because those statements conflict for Idaho, this record keeps Idaho producer-only and does not treat the table number as established agency surplus-lines authority. The page is company-reported and does not establish product availability. 17

    Vouch lists cyber liability in its technology-company programs.

Who Regulates Insurance in Alaska?

Alaska Division of Insurance

The Alaska Division of Insurance regulates insurers and insurance licensees, provides company and licensee searches, and investigates insurance complaints within its authority. Its consumer-services section handles disputes involving claims, cancellations, premium refunds, agents, and insurers. 3,4,5

Surplus-Lines Tax and Stamping Office in Alaska

Reported tax rate. 2.7% of gross premium less returns plus 1% filing fee; wet marine: 0.75%, no fee 7,6,8,9

For covered property and casualty surplus-lines risks, Alaska lists a 2.7% tax and a separate 1% filing fee on gross premium less returned premium. Qualifying wet-marine and transportation policies instead carry a 0.75% tax on gross premium and no filing fee; risks of state or local government and certain interstate aircraft are exempt from both tax and fee. A multistate placement is regulated under the insured’s home-state rules, and Alaska says to evaluate each policy’s home state separately.

  • Alaska has a placement-list exception: If a risk appears on Alaska’s surplus-lines placement list, the Division says the broker does not have to canvass admitted insurers for declinations before placement; the broker must document the applicable list entry. 6
  • Alaska has limited tax and search exceptions: The Division says qualifying wet-marine and transportation policies need no diligent search and pay no 1% filing fee. Tax and filing fees also do not apply to state or political-subdivision risks or qualifying interstate aircraft, although other placement requirements remain. 10

What Should You Ask Before Buying Cyber Insurance in Alaska?

  1. How will the incident team document its investigation and timing under Alaska’s “without unreasonable delay” standard?
  2. Does the response service notify nationwide credit reporting agencies if more than 1,000 Alaska residents are affected?
  3. If we conclude harm is unlikely, who prepares the required written notice to the Alaska Attorney General and retains the five-year record?
  4. Who tracks a law-enforcement delay and restarts notices when it is lifted?

Cyber Insurance in Alaska: Frequently Asked Questions

How soon must we notify Alaska residents after a data breach?

As soon as possible and without unreasonable delay for a covered person’s breach involving personal information of an Alaska resident. The statute allows time to determine scope and restore system integrity but sets no fixed day count. 2

Does Alaska require notice to credit bureaus after a breach?

Yes, if AS 45.48.010 requires notice to more than 1,000 Alaska residents. Nationwide consumer reporting agencies must receive timing, distribution, and content information without unreasonable delay, unless the information collector is subject to GLBA. 2

Can a business skip breach notices in Alaska if harm is unlikely?

Only after an appropriate investigation and written notice to the Alaska Attorney General. Document the determination and keep it for five years. 2

Cyber Insurance Guides for Other States

Other coverage in AlaskaEvery coverage guide for Alaska, plus the regulator and surplus-lines details.

Updated .

This guide is informational and does not determine whether a policy is available or meets your needs. Editorial policy. To suggest a correction, contact Spot with a supporting source.

Get Help With Insurance Buying and Renewals.

Get help buying coverage and managing renewals, with less paperwork for your team. Create your account and submit an insurance request online.

Talk to Spot