
What Cyber Insurance Requirements Apply in New Jersey?
New Jersey requires a business that must notify a resident of a qualifying breach to report the breach to the Division of State Police before sending customer notice. The law allows a no-notice determination only when misuse is not reasonably possible, and requires that written finding to be retained for five years.
What Is Cyber Insurance?
Cyber insurance can help pay covered response costs and claims against your business after a cyber incident. If your business relies on data, software or outside providers, compare response limits, vendor outages and approval rules. Read the national Cyber liability guide.
What Should You Watch for With Cyber Insurance in New Jersey?
State Police Report Comes First
Before notifying customers, a business or public entity must report the breach and related information to the Division of State Police for investigation or handling. Make the police report a release dependency in the New Jersey incident plan. 1,3
Keep a Five-Year No-Notice Record
A business or public entity may avoid customer notice only by establishing that misuse is not reasonably possible; it must document the determination in writing and retain it for five years. Preserve the evidence supporting that finding. 1
Do Not Notify a Breached Email Account
For a breach limited to credentials permitting online-account access, a business may direct the customer to change credentials; if it furnishes the affected email account, it cannot send notice to that compromised account. Confirm the notice channel and any reused credentials in the response plan. 1,2
Which Cyber Insurance Providers Have New Jersey License Records?
These providers publish a national listing for Cyber liability; the license records below name the licensed entities and roles. Some records rely on company-reported information rather than independent regulator verification. A national listing does not confirm the product is available in New Jersey. Check the regulator’s license lookup and confirm state availability for your business when requesting a quote.
At-Bay
At-Bay Insurance Services LLC
At-Bay’s license page lists P&C producer and surplus-lines broker license numbers for all 50 states and the District of Columbia. These are company disclosures and do not establish product availability in each jurisdiction. 11
At-Bay offers primary and excess cyber insurance for businesses with revenue up to $5 billion.
Coalition
Coalition Insurance Solutions, Inc.
Coalition’s license page lists producer and surplus-lines licenses for Coalition Insurance Solutions, Inc. in all 50 states and the District of Columbia. The page separately lists insurers; this record covers the brokerage entity only. 12
Coalition offers cyber insurance.
Corgi
Corgi Insurance Services, Inc.
Corgi’s company producer-license table lists 50 jurisdictions: 49 states and the District of Columbia, including DC license 3003091619. New Mexico does not appear in the table and is not included here; the omission does not establish that Corgi is unlicensed there. The company-reported table has no stated as-of date and does not establish product availability. 13
Corgi lists cyber insurance among its business insurance offerings.
Hiscox
Hiscox Insurance Company Inc.
Hiscox’s U.S. company information states that Hiscox Insurance Company Inc. is licensed in all 50 states and the District of Columbia. This is company-reported insurer authority for this entity and does not establish which company issues every Hiscox-branded product. 14
Hiscox offers cyber insurance for small businesses.
Risklytics
Risklytics, Inc.
Risklytics’ licensing page lists its Massachusetts resident agency license plus state license records in Arizona, Colorado, Illinois, Indiana, New Jersey, Ohio, Texas and Washington; it identifies the NPN record date as September 10, 2026. This list is company-published and not a product availability map. 16
Risklytics arranges cyber insurance for robotics, hardware and AI businesses.
TechInsurance
Specialty Program Group LLC
TechInsurance’s current licensing page names Specialty Program Group LLC / SPG Insurance Solutions and lists state license numbers, but labels Rhode Island “Individual licenses” rather than identifying a license for the named agency. RI is omitted because this disclosure does not establish agency authority there; this is a search limitation, not an assertion that the company is unlicensed. The remaining state entries are company-reported and are not an insurance product availability map. 17
TechInsurance arranges cyber insurance for small businesses.
Vouch
Vouch Specialty Insurance Services, LLC
Vouch’s licenses page, effective January 16, 2025, lists producer licenses in all 50 states and DC. Its separate surplus-lines table includes Idaho number 870820, while a footnote says Georgia and Idaho do not issue agency-level surplus-lines licenses. Because those statements conflict for Idaho, this record keeps Idaho producer-only and does not treat the table number as established agency surplus-lines authority. The page is company-reported and does not establish product availability. 18
Vouch lists cyber liability in its technology-company programs.
Who Regulates Insurance in New Jersey?

New Jersey Department of Banking and Insurance
New Jersey DOBI licenses insurers and producers, reviews insurance products and rates, monitors insurer solvency and responds to insurance complaints. The Property and Casualty unit regulates commercial and personal property and casualty rates, rules and forms. 4,5,6,7
Surplus-Lines Tax and Stamping Office in New Jersey
Reported tax rate. 5% of gross premium, less return premium 8,9,10
New Jersey’s Department of Banking and Insurance states a 5% surplus-lines tax for policies effective on or after July 1, 2009; its FAQ also describes direct-procurement tax filing for premium allocated to New Jersey. A New Jersey surplus-lines producer generally must make a diligent effort to place the risk with authorized insurers, subject to the exportable-list and other statutory exceptions. New Jersey’s separate surplus-lines guaranty fund has narrow coverage; ordinary commercial surplus-lines claims are generally outside guaranty protection.
What Should You Ask Before Buying Cyber Insurance in New Jersey?
- Who will make the New Jersey State Police report before customer notices go out?
- If we decide notice is unnecessary, where will we retain the written misuse analysis for five years?
- If breached data is online-account credentials, how will we notify customers without using the compromised email account?
Cyber Insurance in New Jersey: Frequently Asked Questions
Does New Jersey require a police report before breach notices?
Yes. A business or public entity required to disclose a breach must report it to the Division of State Police before notifying customers. 1
Can a New Jersey business skip customer notice after a breach?
Only if it establishes that misuse is not reasonably possible, documents that finding in writing, and retains it for five years. 1
Can a New Jersey business email notice to a breached email account?
No, if the business furnishes that email account; it must use another permitted method or a clear online notice when the customer connects from a customary location. 1
Cyber Insurance Guides for Other States
Alabama
Alaska
Arizona
Arkansas
California
Colorado
Connecticut
Delaware
District of Columbia
Florida
Georgia
Hawaii
Idaho
Illinois
Indiana
Iowa
Kansas
Kentucky
Louisiana
Maine
Maryland
Massachusetts
Michigan
Minnesota
Mississippi
Missouri
Montana
Nebraska
Nevada
New Hampshire
New Mexico
New York
North Carolina
North Dakota
Ohio
Oklahoma
Oregon
Pennsylvania
Rhode Island
South Carolina
South Dakota
Tennessee
Texas
Utah
Vermont
Virginia
Washington
West Virginia
Wisconsin
Wyoming
Other coverage in New JerseyEvery coverage guide for New Jersey, plus the regulator and surplus-lines details.






