What Cyber Insurance Requirements Apply in Maine?

Maine requires resident notices as quickly as possible and no later than 30 days after the business becomes aware of a breach and identifies its scope, unless law enforcement delays notice. A required regulator report goes to your Maine Department of Professional and Financial Regulation regulator, or to the Attorney General if you are not regulated there.

What Is Cyber Insurance?

Cyber insurance can help pay covered response costs and claims against your business after a cyber incident. If your business relies on data, software or outside providers, compare response limits, vendor outages and approval rules. Read the national Cyber liability guide.

What Should You Watch for With Cyber Insurance in Maine?

  • Maine’s 30 Days Run After Awareness and Scope

    The resident-notice deadline is no later than 30 days after the person becomes aware of the breach and identifies its scope. A third-party data maintainer must notify the owner immediately after discovery, so ask vendors how quickly they share evidence needed to establish scope and start your clock. 1

  • The Filing Goes to Your Regulator or the AG

    When notice to residents is required, Maine directs a regulated entity to notify the appropriate Department of Professional and Financial Regulation agency; otherwise it must notify the Attorney General. Maine’s AG specifically identifies licensed insurers as reporting to the Bureau of Insurance. Confirm your regulator before an incident, rather than defaulting to an AG filing. 1,2

  • Maine Adds a Seven-Business-Day Re-Start Rule

    If law enforcement delays notification, Maine allows no more than seven business days after the agency determines notice will not compromise the investigation. Ask the response team to capture the agency’s determination date and calendar that outside limit. 1,2

  • Insurance Licensees Have a Separate Three-Day Report

    Maine insurance licensees must notify the Superintendent as promptly as possible and within three business days after determining that a qualifying cybersecurity event occurred. The separate Insurance Data Security Act report can apply alongside the resident-notification law; ask your team which event facts meet §2266 criteria and who files both reports. 3

Which Cyber Insurance Providers Have Maine License Records?

These providers publish a national listing for Cyber liability; the license records below name the licensed entities and roles. Some records rely on company-reported information rather than independent regulator verification. A national listing does not confirm the product is available in Maine. Check the regulator’s license lookup and confirm state availability for your business when requesting a quote.

  • At-Bay

    Insurance producer, Surplus-lines broker · checked 2026-09-28

    At-Bay Insurance Services LLC

    At-Bay’s license page lists P&C producer and surplus-lines broker license numbers for all 50 states and the District of Columbia. These are company disclosures and do not establish product availability in each jurisdiction. 10

    At-Bay offers primary and excess cyber insurance for businesses with revenue up to $5 billion.

  • Coalition

    Insurance producer, Surplus-lines broker · checked 2026-09-28

    Coalition Insurance Solutions, Inc.

    Coalition’s license page lists producer and surplus-lines licenses for Coalition Insurance Solutions, Inc. in all 50 states and the District of Columbia. The page separately lists insurers; this record covers the brokerage entity only. 11

    Coalition offers cyber insurance.

  • Corgi

    Insurance producer · checked 2026-09-28

    Corgi Insurance Services, Inc.

    Corgi’s company producer-license table lists 50 jurisdictions: 49 states and the District of Columbia, including DC license 3003091619. New Mexico does not appear in the table and is not included here; the omission does not establish that Corgi is unlicensed there. The company-reported table has no stated as-of date and does not establish product availability. 12

    Corgi lists cyber insurance among its business insurance offerings.

  • Hiscox

    Insurer · checked 2026-09-28

    Hiscox Insurance Company Inc.

    Hiscox’s U.S. company information states that Hiscox Insurance Company Inc. is licensed in all 50 states and the District of Columbia. This is company-reported insurer authority for this entity and does not establish which company issues every Hiscox-branded product. 13

    Hiscox offers cyber insurance for small businesses.

  • TechInsurance

    Insurance producer · checked 2026-09-28

    Specialty Program Group LLC

    TechInsurance’s current licensing page names Specialty Program Group LLC / SPG Insurance Solutions and lists state license numbers, but labels Rhode Island “Individual licenses” rather than identifying a license for the named agency. RI is omitted because this disclosure does not establish agency authority there; this is a search limitation, not an assertion that the company is unlicensed. The remaining state entries are company-reported and are not an insurance product availability map. 15

    TechInsurance arranges cyber insurance for small businesses.

  • Vouch

    Insurance producer, Surplus-lines broker · checked 2026-09-28

    Vouch Specialty Insurance Services, LLC

    Vouch’s licenses page, effective January 16, 2025, lists producer licenses in all 50 states and DC. Its separate surplus-lines table includes Idaho number 870820, while a footnote says Georgia and Idaho do not issue agency-level surplus-lines licenses. Because those statements conflict for Idaho, this record keeps Idaho producer-only and does not treat the table number as established agency surplus-lines authority. The page is company-reported and does not establish product availability. 16

    Vouch lists cyber liability in its technology-company programs.

Who Regulates Insurance in Maine?

Maine Bureau of Insurance

The Maine Bureau of Insurance licenses producers and companies, enforces Maine insurance laws, and investigates property and casualty complaints including commercial coverage complaints. You can use its state lookup or complaint service to check a license or raise an insurance issue. 4,5,6

Surplus-Lines Tax and Stamping Office in Maine

Reported tax rate. 3% of gross direct premium when Maine is the insured's home state 7,8,9

Maine charges 3% of gross direct premium when it is the insured's home state; your broker handles the tax and may include it with the premium. Surplus-lines policies are outside Maine guaranty-association protection. Maine generally requires a diligent search, with an exempt-commercial-purchaser exception requiring broker disclosure and the purchaser's written request.

What Should You Ask Before Buying Cyber Insurance in Maine?

  1. When will our incident team consider Maine’s 30-day period started: awareness plus identifying the breach scope?
  2. Which Maine PFR regulator receives our report, or do we report to the AG because we are not regulated by PFR?
  3. Who records law enforcement’s release date and tracks Maine’s seven-business-day notice limit?
  4. If our organization holds a Maine insurance license, who checks whether the separate three-business-day Superintendent report applies?

Cyber Insurance in Maine: Frequently Asked Questions

How many days does Maine give a business to notify residents?

No more than 30 days after the person becomes aware of the breach and identifies its scope, subject to a law-enforcement delay. 1

Where must a Maine business report a breach?

To its appropriate Department of Professional and Financial Regulation regulator if regulated there; otherwise, to the Attorney General. 1,2

How long may Maine notice be delayed after law enforcement releases it?

No longer than seven business days after law enforcement determines notice will not compromise the criminal investigation. 1

Cyber Insurance Guides for Other States

Other coverage in MaineEvery coverage guide for Maine, plus the regulator and surplus-lines details.

Updated .

This guide is informational and does not determine whether a policy is available or meets your needs. Editorial policy. To suggest a correction, contact Spot with a supporting source.

Get Help With Insurance Buying and Renewals.

Get help buying coverage and managing renewals, with less paperwork for your team. Create your account and submit an insurance request online.

Talk to Spot