Commercial lines

Ransomware, breach response, and wire fraud

Cyber Liability Insurance for Ohio & West Virginia Businesses

Small businesses are targeted precisely because their defenses are thin. A cyber policy pays for the expensive parts of an incident, forensics, legal counsel, notification, ransom negotiation, and lost income, and gives you a 24/7 number to call at 2 a.m. General liability and BOPs generally exclude these losses.

Who this is for

  • Any business storing customer data or taking card payments
  • Medical, dental, and legal practices with regulated records
  • Companies that wire money or pay vendor invoices by email
  • Contracts that require cyber coverage as a vendor condition

What Cyber Liability Insurance covers

Coverage points below are typical. Actual terms depend on the carrier and the policy form we place.

Breach response & forensics

IT investigation to find out what happened, plus legal counsel to guide notification obligations.

Notification & credit monitoring

Required notices to affected individuals and monitoring services, both of which carry per-record costs.

Ransomware & cyber extortion

Negotiation, ransom payment where lawful, and restoration of encrypted systems.

Business interruption & system failure

Lost income while systems are down, including dependent outages at a vendor.

Funds transfer fraud & social engineering

Money lost to a spoofed vendor invoice or a fraudulent wire request, one of the most common small-business claims.

Data restoration

The cost to rebuild corrupted or destroyed data and applications.

Network security & privacy liability

Third-party claims from customers or partners whose data was exposed.

Regulatory fines & PCI penalties

Defense and, where insurable, fines and card-brand assessments after a breach.

What it does not cover

  • Property damage or bodily injury from a cyber event (bodily injury sits elsewhere)
  • Losses from failure to maintain the security controls you attested to
  • Prior known incidents that started before the policy period
  • Loss of intellectual property value or future revenue potential

Typical limits & requirements

$250K, $1M for most small businesses
Higher limits for practices holding health or financial records.
$1,000, $25,000 retention
Your deductible per incident; lower retentions raise premium.
Sublimits on social engineering
Wire fraud is often sublimited well below the policy limit, read this one carefully.

What drives your price

  • Record count and how sensitive the data is
  • Multi-factor authentication, backups, and endpoint protection
  • Revenue and industry
  • Prior incidents and how they were remediated
  • Employee security training

Ohio & West Virginia notes

Ohio's Data Protection Act offers an affirmative legal defense to businesses that maintain a recognized cybersecurity framework, pairing that program with a cyber policy is a strong combination for Ohio businesses. Both Ohio and West Virginia require notifying affected residents after a breach, and those notification costs land on you regardless of company size.

Common questions

Isn't cyber covered by my BOP?

Only in a very limited way, if at all. Most package policies include a small endorsement that will not cover a real ransomware event or wire fraud loss.

We're small, are we really a target?

Small businesses are the most common victims because attackers automate. Fake-invoice wire fraud in particular hits companies of every size.

Will carriers require security controls?

Yes. Multi-factor authentication on email and remote access, plus tested offline backups, are effectively required by most carriers now.

What should I do first after an incident?

Call the carrier's incident hotline before touching systems or paying anything. Coverage often depends on using their approved vendors.

Guides worth reading first

Business owner guides covering cyber liability insurance and the rest of your Ohio or West Virginia insurance program.

Ready now? Start your comparison quote or take the two-minute coverage quiz.

Other business coverage