How does cyber risk change traditional claims handling for ransomware and data breach losses?

• A. It eliminates the need for regulatory notifications.
• B. It requires forensic investigation, regulatory notifications, cyber-specific endorsements, and consideration of BI and contingent losses.
• C. It only affects property coverage, not BI.
• D. It uses standard homeowners policy forms.

Answer: (B)

Cyber risk expands the claims process beyond traditional lines by bringing in specialized steps and coverages. For ransomware and data breaches, the process usually begins with a forensic investigation to determine exactly what happened, what data was involved, and the extent of the exposure. This information is essential for remediation and for proving losses to regulators and insurers. Regulatory notifications are a major piece, since many data breach laws require timely notice to authorities and affected individuals, and failing to do so can trigger penalties and legal action. To address these events, many policies now rely on cyber-specific endorsements or stand‑alone cyber policies that cover first‑party costs (such as forensics, notification, and credit monitoring) as well as third‑party liability. In addition, cyber incidents frequently cause business interruption and contingent losses (through failures of critical suppliers or customers), so claims handling must assess and coordinate BI and contingent loss exposures. This combination—forensics, regulatory notices, cyber endorsements, and BI/contingent loss considerations—best reflects how cyber risk changes the handling of ransomware and data breach losses.