Breach, ransomware, wire fraud and regulatory defence — bound to the exact language customers and regulators require. Already appointed? Send us the account. New here? Apply for appointment below.
Cyber liability covers the first-party costs of recovering from a cyber event — incident response, forensics, ransomware, lost income — and the third-party liability when a customer's or employee's data is exposed. It's the line that now lives at the intersection of customer contracts, board expectations and regulator demands.
Customer contracts and investor diligence can ask for cyber limits or specific wording. We compare the request with the policy's limit, retention, definition and conditions before binding a programme.
Sensitive client data creates breach-response, notification and third-party liability questions. The right review starts with the data types, systems, record volume and client commitments, not only employee count.
Funds-transfer fraud and vendor impersonation can create material first-party loss. Cyber and crime forms can address them differently, so the social-engineering language and limits should be reviewed against the dollars moving through the firm.
AI-assisted output, connected products and operational technology can create liability questions that a generic policy may not address as intended. Review the services definition, exclusions and customer promises against the actual product.
Incident response, forensics, legal counsel, customer and regulator notification, credit monitoring and PR — the first-call costs that hit before any litigation does.
Extortion payments where insurable, system restoration and lost income while the business is offline — including operational technology (OT) shutdown on connected production systems.
Wire fraud, fake-vendor invoices and email compromise — sized to the dollars actually moving through the firm and bound with explicit social-engineering language (not a sub-limit).
Third-party claims from clients, customers and employees whose data was exposed — plus defence and fines (where insurable) for HHS, SEC, FINRA, state AGs and international regulators.
If a hack causes physical injury — including via connected products — that sits with GL or product liability, not cyber. We place the two so they line up.
Many cyber forms exclude state-sponsored attacks. The wording matters: a Russian ransomware crew can read either way. We push for affirmative non-state coverage on every renewal.
If a vendor patch sat unapplied for a year and the loss traces to that exact CVE, expect a fight. We flag what hygiene the carrier actually requires to keep cover in force.
Cyber and AI liability sized to clear enterprise procurement and grow with every round.
See the pageFirst-party + third-party cyber, contingent BI and crime — bound to client MSA requirements.
See the pageDedicated cyber for law firms, accounting firms and agencies holding sensitive matter data.
See the pageHIPAA breach response, ransomware on the EHR and OCR regulatory defence — sized to patient volume.
See the pageFunds-transfer fraud at closing, rent and vendor payments — the largest cyber loss in real estate.
See the pageOT/ICS ransomware and contingent BI — when a hack stops the line, not just the office network.
See the pageRegulated PII, funds-transfer fraud and FINRA/SEC regulatory defence — sized to AUM.
See the pageDonor PII, finance email compromise and ransomware on the donor database.
See the pageWire fraud on draws and vendor payments — the fastest-growing loss for construction firms.
See the pageEvery submission gets matched internally against the carrier relationships most likely to write it — not shopped blind into a dozen inboxes.
Suitable accounts move to an underwriter after a licensed broker reviews the match and final file. Carrier response and quote timing depend on the account and market.
No upfront appointment required. Send the file you have and we’ll let you know what it needs next.
EQT’s McGill agreement puts specialty expertise and technology in focus. What retail agents should ask of a wholesale partner on the next submission.
The same client-fund wire-fraud event can produce a crime claim, a cyber claim and an E&O claim at once. Two real rulings show why the E&O answer isn't automatic.
A retail-agent checklist for California AI startup enterprise deals: product, privacy, MSA, Tech E&O, cyber and D&O.
E&S Placement Stories
Actual accounts, the challenges retail agents brought us, and how Nomos helped place them.
Browse E&S Placement StoriesGet appointed for access to our markets and updates as we expand our offerings.
Get appointedNo upfront appointment required. Send the file you have; we'll let you know within 30 minutes if it's something we can help with.
Sending it elsewhere too? BCC us.