What Cyber Insurance Requirements Apply in Rhode Island?

A Rhode Island business must notify affected residents within 45 calendar days after confirming a qualifying breach and being able to ascertain the required notice information. If more than 500 residents are to be notified, it must also notify the Attorney General and major credit-reporting agencies without delaying resident notices.

What Is Cyber Insurance?

Cyber insurance can help pay covered response costs and claims against your business after a cyber incident. If your business relies on data, software or outside providers, compare response limits, vendor outages and approval rules. Read the national Cyber liability guide.

What Should You Watch for With Cyber Insurance in Rhode Island?

The Rhode Island Clock Has Two Conditions
For a private business, the 45-calendar-day outer limit runs after both breach confirmation and the ability to ascertain the information required for notice; notice still must be as expedient as possible. Ask incident vendors to record both dates and to identify the required content while the investigation proceeds. ¹
More Than 500 Residents Adds Two Recipients
If more than 500 Rhode Island residents are to be notified, the business must report notice timing, content, distribution, and the approximate affected count to the Attorney General and major credit-reporting agencies. Those filings cannot delay notice to residents; ask who prepares each recipient’s report in parallel. ¹
The Notice Must Explain Freeze and Police-Report Options
To the extent known, resident notice must describe the incident and affected count, data types and dates, remediation contacts, how to file or obtain a police report, and how to request a security freeze, including that bureau fees may apply. Ask whether your response plan includes these Rhode Island-specific details and contact information. ¹
Rhode Island Includes Health Data and Account Credentials
The statutory definition includes medical or health-insurance information and an email address paired with credentials that permit access to a personal, medical, insurance, or financial account. Match compromised fields against the definition; a breach only counts under the notice section when it poses a significant identity-theft risk to a resident. ^2,¹

Which Cyber Insurance Providers Have Rhode Island License Records?

These providers publish a national listing for Cyber liability; the license records below name the licensed entities and roles. Some records rely on company-reported information rather than independent regulator verification. A national listing does not confirm the product is available in Rhode Island. Check the regulator’s license lookup and confirm state availability for your business when requesting a quote.

At-Bay
Insurance producer, Surplus-lines broker · checked 2026-09-28
At-Bay Insurance Services LLC
At-Bay’s license page lists P&C producer and surplus-lines broker license numbers for all 50 states and the District of Columbia. These are company disclosures and do not establish product availability in each jurisdiction. ⁸
At-Bay offers primary and excess cyber insurance for businesses with revenue up to $5 billion.
Coalition
Insurance producer, Surplus-lines broker · checked 2026-09-28
Coalition Insurance Solutions, Inc.
Coalition’s license page lists producer and surplus-lines licenses for Coalition Insurance Solutions, Inc. in all 50 states and the District of Columbia. The page separately lists insurers; this record covers the brokerage entity only. ⁹
Coalition offers cyber insurance.
Corgi
Insurance producer · checked 2026-09-28
Corgi Insurance Services, Inc.
Corgi’s company producer-license table lists 50 jurisdictions: 49 states and the District of Columbia, including DC license 3003091619. New Mexico does not appear in the table and is not included here; the omission does not establish that Corgi is unlicensed there. The company-reported table has no stated as-of date and does not establish product availability. ¹⁰
Corgi lists cyber insurance among its business insurance offerings.
Hiscox
Insurer · checked 2026-09-28
Hiscox Insurance Company Inc.
Hiscox’s U.S. company information states that Hiscox Insurance Company Inc. is licensed in all 50 states and the District of Columbia. This is company-reported insurer authority for this entity and does not establish which company issues every Hiscox-branded product. ¹¹
Hiscox offers cyber insurance for small businesses.
Vouch
Insurance producer, Surplus-lines broker · checked 2026-09-28
Vouch Specialty Insurance Services, LLC
Vouch’s licenses page, effective January 16, 2025, lists producer licenses in all 50 states and DC. Its separate surplus-lines table includes Idaho number 870820, while a footnote says Georgia and Idaho do not issue agency-level surplus-lines licenses. Because those statements conflict for Idaho, this record keeps Idaho producer-only and does not treat the table number as established agency surplus-lines authority. The page is company-reported and does not establish product availability. ¹³
Vouch lists cyber liability in its technology-company programs.

Who Regulates Insurance in Rhode Island?

Rhode Island Department of Business Regulation, Insurance Division

The DBR Insurance Division provides an online public verification service for producers, adjusters, surplus-lines brokers, and other licensees, and accepts insurance complaints online. Contact the Division for help determining whether it has authority over a particular policy or dispute. ^3,^4,⁵

Website: Regulator website
License lookup: Search licensed producers
Complaints: File a complaint

Surplus-Lines Tax and Stamping Office in Rhode Island

Reported tax rate. 4% of net taxable premium; 2018 filing guide excludes listed broker, carrier and inspection fees ^6,⁷

Rhode Island’s 2024 return applies 4% to net taxable premium (gross premium less returned premium); its 2018 filing guide excludes broker, carrier, and inspection fees from the base. Confirm fee treatment with the Division of Taxation if your bill separates those charges, because no newer official fee-base guidance was located.

What Should You Ask Before Buying Cyber Insurance in Rhode Island?

Who records Rhode Island’s breach-confirmation date and the date required notice details become ascertainable?
If more than 500 Rhode Island residents need notice, who reports timing, distribution, content, and count to the AG and credit agencies without delaying consumers?
Does our notice template explain police reports, security freezes, and any possible bureau fees as Rhode Island requires?
Will the response team check health-insurance and account-access data against Rhode Island’s definition?

Cyber Insurance in Rhode Island: Frequently Asked Questions

How long does a Rhode Island business have to notify residents after a breach?

No later than 45 calendar days after confirmation and the ability to ascertain the required notice information, while acting as expediently as possible and subject to a law-enforcement delay. ¹

When must a Rhode Island business notify the Attorney General about a breach?

When more than 500 Rhode Island residents are to be notified, the business must also notify the AG and major credit-reporting agencies about timing, content, distribution, and approximate count without delaying residents. ¹

What must a Rhode Island data breach notice tell consumers about credit freezes?

It must explain how to request a security freeze, what information is needed, and that consumer-reporting agencies may charge fees. ¹

Sources for Cyber Insurance in Rhode Island

1
R.I. Gen. Laws §11-49.3-4 — Notification of breach. Rhode Island General Assembly; §11-49.3-4(a)(2)(ii), (b), and (d): private-person deadline, law-enforcement delay, >500 reporting and notice contents; history through P.L.2023 ch.375 effective June 27, 2023. Accessed 2026-09-28.
2
R.I. Gen. Laws §11-49.3-3 — Definitions. Rhode Island General Assembly; §11-49.3-3(a)(1), (4)–(6), (9)–(10): breach, encryption, health and account credentials, person, and personal information. Accessed 2026-09-28.
3
rhode-island insurance regulator. State insurance regulator; DBR Insurance Division overview links to complaint, license lookup, statutes, and regulations. Accessed 2026-09-28.
4
DBR License Status Verification. State insurance regulator; Official page identifies online NAIC-partnered status checks for producers, adjusters, motor vehicle appraisers, surplus-lines brokers, and reinsurance intermediaries. Accessed 2026-09-28.
5
DBR Insurance Consumers. State insurance regulator; Official consumer page explains the division's regulated insurance lines and online complaint route. Accessed 2026-09-28.
6
2025 T-71A Surplus Line Broker Return of Gross Premiums. Rhode Island Division of Taxation; 2025 return, p. 1, lines 1–4: net taxable premium is gross premium less returned premiums; 4% tax; filing due April 1, 2026. Accessed 2026-09-28.
7
Guide to Tax Filings for Surplus Lines. Rhode Island Division of Taxation; 2018 Guide to tax filings, surplus-lines section: gross premium for tax purposes excludes carrier, broker, and inspection fees; no newer official fee-base instruction located as of 2026-09-28. Accessed 2026-09-28.
8
Licenses. At-Bay; Current producer introduction and state table; At-Bay Insurance Services LLC; P&C and surplus-lines identifiers. Accessed 2026-09-21.
9
Licenses and Carriers. Coalition; Licenses and Carriers, re-read 22 September 2026: Insurance Licenses table for Coalition Insurance Solutions, Inc., national producer number 18419475, with producer and surplus-lines numbers for all 50 states and DC including California 0L76155, Georgia 196479, Texas 2199630 and 2205589, Pennsylvania 815731 and 817452, Colorado 539028 and Wisconsin 3000108852. Insurance Carriers table naming, with NAIC numbers, Allianz Underwriters Insurance Company 36420, Arch Specialty Insurance Company 21199, Ascot Specialty Insurance Company 45055, Ascot Insurance Company 23752, Aspen Specialty Insurance Company 10717, Chaucer Insurance Company DAC, Coalition Insurance Company 29530, Fireman's Fund Indemnity Corporation 11380, Fortegra Specialty Insurance Company 16823, Lloyd's of London, MSIG Specialty Insurance USA Inc. 34886, MS Transverse Specialty Insurance Company 41807, Steadfast Insurance Company 26387, Vantage Risk Specialty Insurance Company 16275 and Zurich American Insurance Company 16535. Accessed 2026-09-22.
10
Insurance Producer Licenses. Corgi Insurance; Current complete Insurance Producer Licenses table for Corgi Insurance Services, Inc.; 50 rows covering 49 states and DC (DC 3003091619); no New Mexico row; no NPN or as-of date shown. Accessed 2026-09-28.
11
About Hiscox US Insurance. Hiscox; Hiscox Insurance Company Inc. NAIC 10200 as Chicago, IL domiciled insurer admitted or licensed in all 50 states and D.C.; Hiscox Inc. as general agent and Lloyd’s coverholder for Syndicates 33 and 3624; surplus-lines placements through licensed surplus-lines brokers; A.M. Best rating statement. Accessed 2026-09-16.
12
Licenses. ERGO NEXT Insurance; Current entity-by-state license table reopened 28 September 2026: 50 rows under Next First Insurance Agency, Inc., including Washington, DC; New York rows instead list Next Insurance Services PC-1423070 and AP Intego BR-1198885. Accessed 2026-09-28.
13
Licenses. Vouch; Effective 16 January 2025: Vouch Specialty Insurance Services, LLC, NPN 19926463; P&C table (50 states and DC); surplus-lines table includes Idaho 870820; footnote says Georgia and Idaho do not issue agency-level surplus-lines licenses; Idaho retained as producer-only due to conflict. Accessed 2026-09-15.

What Cyber Insurance Requirements Apply in Rhode Island?

What Is Cyber Insurance?

What Should You Watch for With Cyber Insurance in Rhode Island?

The Rhode Island Clock Has Two Conditions

More Than 500 Residents Adds Two Recipients

The Notice Must Explain Freeze and Police-Report Options

Rhode Island Includes Health Data and Account Credentials

Which Cyber Insurance Providers Have Rhode Island License Records?

At-Bay

Coalition

Corgi

Hiscox

Vouch