Cyber insurance for utilities
What cyber insurance covers, in plain English
There are two big buckets.
Your own losses (first-party)
- Lawyers, forensics, and crisis help after an incident
- Notices to customers, credit monitoring, and a call center
- Getting lost or scrambled data back
- Ransomware and cyber extortion
- Lost revenue and extra expense while systems are down
- Sometimes losses when a business you depend on goes down
(Source: EPA 2024 guide)
Claims against you (third-party)
- Liability for a breach or for malware spreading from your system
- Defense and, where allowed, fines from regulatory investigations
- Media liability for your website and public content
Funds transfer fraud and social engineering
Some policies can cover money lost to a phishing email or a fake payment request. When offered, it is often a separate part of the policy with its own limit, so we’ll show you what each quote includes.
The big one for utilities: control systems
Some cyber policies limit or leave out industrial control systems (OT, ICS, SCADA) unless they are added back. Ask about it every time. We will.
Every policy reads different. Nothing here is a promise of coverage; the policy itself decides.
Ready to look at your cyber coverage?
Start with 7 quick questions, or call the office at 205-221-5466.