Get Expert Guidance
What Our Plans Cover
-
Forensic investigation of the inci...
-
Data restoration and system rebuil...
-
Business interruption arising from...
-
Ransomware response and
-
Notification costs to affected ind...
-
Third-party liability for data bre...
-
Regulatory investigation and defen...
-
Public relations and reputation ma...
Who Can Consider This Plan?
- A registered business, professional practice or organisation
- Activities within the classes the insurer writes
- Accurate disclosure of turnover, activities and territories
- Disclosure of all known circumstances that could give rise to a claim
- Compliance with any statutory licensing applicable to the activity
What May Not Be Covered?
- Incidents arising from known and unpatched vulnerabilities
- Failure to maintain the security standards declared at proposal
- Bodily injury and property damage, which belong elsewhere
- Loss of intellectual property value
- Fines and penalties that are uninsurable by law
Always check the policy wording before you commit.
Why Choose Wealth & Covers?
- Expert advice to choose the right plan
- Plans from leading insurance companies
- Hassle-free process and documentation
- End-to-end support, including claim assistance
- Dedicated relationship manager
Our Insurance Partners
- Star Health Insurance
- Care Health Insurance
- Niva Bupa Health Insurance
- HDFC ERGO
- ICICI Lombard
- Bajaj Allianz
We represent multiple providers to help you find the most suitable option at the best price.
- Expert Guidance Personalised advice from experienced insurance professionals.
- End-to-End Support From choosing the right plan to claim assistance, we are with you always.
- Claims Assistance Hassle-free claim support to ensure you get what you deserve.
- Transparent Process Clear information, easy documentation and a hassle-free experience.
Overview
Cyber insurance covers two quite different things. First-party cover pays your own costs after an incident: forensic investigation, data restoration, business interruption, ransom payments where lawful, notification and credit monitoring. Third-party cover pays claims against you from customers, partners and regulators whose data you held.
Both matter, and for most Indian businesses the first-party side is where the money actually goes. A ransomware incident produces days of downtime, a forensic bill, a restoration project and a legal process — usually before any third party has made a claim at all.
India's data protection regime and the CERT-In directions have made incident reporting and record-keeping legal obligations. A cyber policy now sits alongside those obligations rather than being an optional extra for technology companies.
Who should consider it
Any business holding customer data — which is nearly all of them. E-commerce, healthcare, financial services, education and any business taking online payments. Companies with regulatory reporting obligations under CERT-In and the data protection framework.
Benefits
- Incident response costs, including forensics and legal advice
- Business interruption from a cyber event, which property policies exclude
- Data restoration and system recovery costs
- Third-party liability to customers and partners whose data was exposed
- Regulatory investigation costs and, where insurable, penalties
- Access to a specialist breach response team, usually within hours
What is covered, and what is not
Read the right-hand column first. It is the one that decides whether a claim is paid.
Typically covered
- Forensic investigation of the incident
- Data restoration and system rebuild costs
- Business interruption arising from a cyber event
- Ransomware response and, where lawful, ransom payment
- Notification costs to affected individuals
- Third-party liability for data breach claims
- Regulatory investigation and defence costs
- Public relations and reputation management support
Typically not covered
- Incidents arising from known and unpatched vulnerabilities
- Failure to maintain the security standards declared at proposal
- Bodily injury and property damage, which belong elsewhere
- Loss of intellectual property value
- Fines and penalties that are uninsurable by law
- Costs of improving security beyond restoring the prior position
- Incidents that began before the retroactive date
- War and state-sponsored attack, on many wordings
Inclusions and exclusions vary between providers and between plans from the same provider. The wording in your own policy document is what governs — we will walk you through it before you buy.
How it works with us
- 1 We map the exposure before choosing a policy What you do, who it touches, and where a claim would come from. Liability cover follows the exposure, not the industry label.
- 2 Trigger and retroactive date agreed first Occurrence or claims-made, and how far back the cover reaches. These decide more than the limit does.
- 3 Limits tested against a realistic worst case Not the average claim — the one that would matter. Defence costs are part of that calculation.
- 4 Underwriting and, for larger risks, a survey Insurers price liability on process and controls. Good documentation genuinely lowers the premium.
- 5 Policy issued, and notification process explained Late notification is the leading cause of declined liability claims. We make sure your team knows when to call.
Important considerations
The things a brochure tends to leave out. Read these before you decide.
- Call the insurer's response team before doing anything else. Restoring systems yourself first can destroy the forensic evidence the claim depends on.
- Answer the security questionnaire accurately. Cover is underwritten on the controls you declare, and an incident traced to a control you claimed to have but did not is a serious problem.
- Check the business interruption waiting period. Many incidents are resolved within twelve hours, which means many incidents produce no interruption payment at all.
- Property and office policies do not cover data loss without physical damage. That gap is the reason this class exists.
- Patch discipline is now a claims issue. Incidents exploiting known vulnerabilities left unpatched are excluded on most wordings.
Documents required
- Business registration and constitution documents
- Description of activities, products or services
- Annual turnover and, where relevant, export turnover
- Number of employees and details of contractors engaged
- Claims and incident history, usually for five years
- Existing policy schedules, where cover is being replaced
- Contracts specifying required indemnity limits, where applicable
Frequently Asked Questions
Does my office or property policy cover a cyber attack?
No. Those policies respond to physical damage. Data encrypted by ransomware, a network intrusion or a privacy claim involve no physical damage at all, and fall entirely outside them. That gap is precisely what cyber insurance addresses.
Will the policy pay a ransom?
Where payment is lawful, most policies do, alongside funding the negotiation and the technical response. The more valuable part is usually the response team — specialists who have handled the same attack before and can shorten the outage.
What should I do first after an incident?
Call the insurer's incident response line before touching the systems. Restoring or wiping machines yourself can destroy the forensic evidence needed to establish what happened, which affects both the claim and your regulatory position.
Does it cover regulatory penalties?
Investigation and defence costs, generally yes. Penalties themselves only where they are insurable by law, which varies. Given India's data protection framework and the CERT-In reporting obligations, the defence cost cover alone is substantial value.
We are small. Are we really a target?
Most ransomware is opportunistic rather than targeted, which makes smaller businesses more exposed rather than less — they have weaker controls and less internal capability to respond. Size affects the premium, not the probability.
Want a shortlist instead of a catalogue?
Tell us the situation and an advisor comes back with two or three options that actually fit — and names what each one gives up.