Does Business Interruption Cover Cyber Attacks?
Not necessarily—property-based business-interruption coverage may require physical damage, so a cyberattack may need a cyber policy or a specific endorsement to cover lost income.
Coverage depends on whether the policy includes electronic data or cyber-related business interruption, what system failure qualifies, and whether the event must result from a security breach or other defined incident. Cyber policies also vary in waiting periods, restoration periods, and dependent-system coverage.
Check the property policy for electronic-data and nonphysical-loss exclusions, then review any cyber policy’s business-interruption insuring agreement. Confirm coverage for your own network, cloud providers, critical vendors, restoration costs, and lost income. Do not infer cyber interruption coverage from a general business-income limit.
