Complete Guide to Cyber Liability Insurance in India 2026

In 2025, India experienced 29,44,248 (2.94 million) cybersecurity attacks, according to the Indian Computer Emergency Response Team (CERT-In). Firms such as IT, Fintechs, banks, NBFCs, E-commerce, healthcare providers, and startups handle multiple customers' data and other sensitive information that must be protected from cybercriminals.

To protect their own and their clients' sensitive information, companies can opt for cyber liability insurance. This insurance protects companies and individuals from financial losses caused by cyberattacks.

Let’s understand in detail what Cyber Liability Insurance is, how it works, its coverage, and exclusions.

What is Cyber Liability Insurance?

Cyber Liability Insurance is an insurance policy that protects businesses and individuals against high and unexpected financial loss resulting from cyberattacks, data breaches, and online fraud.

Cyber liability insurance covers expenses incurred in data recovery, legal fees, business interruption, and third-party liabilities.

Cyber Insurance and India's DPDP Act

Before going into details about cyber liability insurance, you must understand India’s DPDP Act. India’s Digital Personal Data Protection (DPDP) Act is a data privacy law governing digital personal data. It makes data protection a strict requirement, prompting insurers to weigh DPDP compliance heavily when issuing cyber liability insurance.

Why Businesses in India Need Cyber Liability Insurance

Here’s why businesses need Cyber Liability Insurance.

Increasing Cyberattacks

As India moves towards digitalisation, companies and individuals are experiencing an increase in cybersecurity threats, including malware, phishing, and hacking.

SME Sensitivity

Small and mid-sized businesses (SMEs) often lack dedicated internal security teams and are an easy target for cyber attackers and hackers.

Supply Chain Gaps

Interconnected vendors and cloud networks handle vast amounts of data, making them a prime target for cyberattacks.

Data Recovery & Forensics

Cyber liability insurance covers the cost of hiring experts to investigate data breaches and restore it.

Business Interruption

Cyber liability insurance compensates for the loss of income and ongoing fixed costs borne by the company while the business operations are paused.

Third-Party Claims

Cyber security insurance compensates policyholders for legal defense expenses and settlements if a customer or partner sues the company over a data breach.

Data Privacy Laws

The insurer helps manage expenses incurred in strict compliance with regulations and mandatory customer notification requirements.

Crisis Management

The insurer covers the cost of developing and implementing public relations and communication strategies to repair a company’s brand reputation after a cyberattack.

What Does Cyber Liability Insurance Cover?

The following are the losses covered by Cyber Liability Insurance.

First-Party Losses

First-Party losses refer to financial losses borne by the company due to cyberattacks. The following first-party expenses are covered by the cyber liability insurance policy.

• Data recovery

The insurer compensates for the costs incurred for recovering lost, damaged, or deleted data and restoring your computer systems after a cyberattack.

• Business interruption

Cyber Liability Insurance covers the loss of income and fixed expenses if the business operations stop due to a cyberattack.

• Cyber extortion

The insurer will help manage ransomware attacks by covering expert support and other related expenses, depending on your policy terms.

• Incident response

The insurer covers the cost of hiring cybersecurity experts to investigate the attack, identify its cause, and assist in notifying affected customers or authorities if required.

Third-Party Liabilities

The following are the third-party liabilities covered by a Cyber Liability Insurance policy.

• Client or Employee Lawsuits

The policy covers legal costs if the company is sued because the customers' or employees' data was leaked.

• Regulatory Fines

The insurance provider will pay certain fines, penalties, or legal costs incurred if a government authority takes action against the company after a data breach, where allowed by law.

• Media Liability

Cyber Liability Insurance covers legal costs if your online content leads to claims such as copyright infringement or defamation.

What is Not Covered Under Cyber Liability Insurance in India?

The following expenses are not covered under Cyber Liability Insurance policies in India.

Intentional or Fraudulent Acts

The policy does not cover financial losses caused by intentional fraudulent and criminal activities, or dishonest actions by the business or its employees.

Known Incidents

If the company or its employees were already aware of any cyberattack, security issue, or legal problem before buying the policy, any losses arising from the event will not be covered.

War and Terrorism

Cyberattacks related to war, terrorism, or government-backed attacks are usually not covered under a cyber liability insurance policy.

Unpatched Security Issues

The company’s cyber liability claims can be rejected if the attack happened because important software updates or security measures were ignored.

Intellectual property theft

Financial losses arising from patents, trademarks, copyrights, or trade secrets are generally not covered under a Cyber Liability policy.

Cryptocurrency losses

Most Cyber Insurance policies do not cover losses arising from cryptocurrency theft, price changes, or online trading activities.

Who Should Buy Cyber Liability Insurance?

The following companies and individuals can buy Cyber Liability Insurance policies.

IT and Tech Companies

Software companies, IT service providers, and BPOs that handle sensitive and significant client data must opt for Cyber Liability Insurance to protect themselves against financial loss arising from cyberattacks.

Fintech and Financial Services

Banks, NBFCs, payment gateways, and digital wallet companies that process online payments and store their customers’ sensitive financial data must have cyber liability insurance.

E-commerce and Retail

E-commerce and online retail businesses collect customer details such as payment information, addresses, and order history. A data breach can result in financial losses and reputational damage if the customer’s information is leaked.

Healthcare Providers

Hospitals, clinics, and diagnostic centres store digital patient records and hence are often targeted by ransomware attacks that can disrupt critical healthcare services.

SMEs and Startups

Small businesses and startups may not have strong internal cybersecurity departments or systems, making them more vulnerable to hacking, data breaches, and business interruptions.

Businesses Covered Under the DPDP Act

Companies that collect or process personal data and are covered under the DPDP Act must have Cyber Insurance.

Vendors Working with Large Companies

Many large organisations require their vendors and partners to have Cyber Insurance before signing contracts, making it an important business requirement.

Individuals and Families

Personal Cyber Insurance can protect individuals against online fraud, identity theft, phishing scams, and other types of digital financial fraud.

How Much Does Cyber Liability Insurance Cost in India?

The premium for Cyber Liability Insurance is based on the company’s size, annual turnover, industry, and cybersecurity practices. Businesses with higher turnover usually pay higher premiums because they face greater financial risks and are more likely to be targeted by cybercriminals.

Note: The above estimated premium ranges for a Cyber Liability Insurance policy with a ₹1 crore sum insured. The actual premium may vary depending on your industry, security controls, claims history, and the coverage selected.

Cyber Liability Insurance vs Professional Indemnity Insurance

Most people often get confused between cyber liability insurance and professional indemnity insurance, thinking they are the same policy. Here’s a detailed table explaining the difference between the two policies.

FAQs

What is Cyber Liability Insurance?

Cyber Liability Insurance is a type of insurance that protects businesses against financial losses arising from cyberattacks, data breaches, or hacking.

Is Cyber Insurance mandatory in India?

No, Cyber Liability Insurance is not mandatory in India.

Does Cyber Liability Insurance cover ransomware?

Yes, most Cyber Insurance policies cover ransomware attacks and compensate for costs incurred in data recovery, system restoration, and business interruption, depending on the policy terms.

Does Cyber Liability Insurance cover phishing attacks?

Yes, most cyber liability insurance policies cover phishing attacks. Policies cover losses caused by phishing attacks, provided the policy includes social engineering fraud coverage or a dedicated cyber-crime add-on.

Why should companies buy Cyber Liability Insurance?

Cyber liability insurance can help businesses recover from costly cyberattacks without facing significant financial stress.

How much coverage do SMEs need?

The right cyber liability insurance coverage for SMEs depends on their business size, revenue, and the amount of sensitive data they handle.

Does Cyber Liability Insurance cover cloud attacks?

Yes, cyber liability insurance covers cloud attacks provided the policy includes first-party data or system restoration, business interruption, and third-party liability.