The law firm cyber claim that isn't ransomware: client matter data exfiltration
Law firms over-index on ransomware in their cyber planning. The faster-growing claim is silent exfiltration of client matter data — and the policy response is different.
Law, accounting, consulting and agency firms — including the ones standard markets pass on.
Professional liability (E&O) — the line that covers allegations of negligent, wrong or incomplete professional services. Standard GL won't touch a pure economic loss from advice. E&O is the entire reason a consulting firm carries insurance.
Yes. We bind to the exact limit, retention and coverage trigger your client requires, and we shop carriers that price boutique consulting and agency risk on its merits — not on a generic 'professional services' rate.
For firms holding matter files, client tax records or M&A data, cyber is no longer optional. You need breach response, ransomware (including business interruption while the document system is down), and third-party liability for client data exposed. Most package cyber sub-limits this for legal and accounting — we place it on dedicated forms with limits sized to the matter book.
That's where we go to E&S. Boutique firms, fractional executives, professionals with prior claims and accounts in unusual specialities all get pushed out of the admitted market. We work with the surplus-lines markets that price these accounts on their actual exposure, not a rate filing they don't fit.
The areas that matter most for your kind of business — what they do, and the losses they're built to absorb.
Cover for allegations of negligent, wrong or incomplete professional services — sized to your fee revenue and the contract limits your clients demand.
Learn about this coverBreach response, ransomware, regulatory defence and third-party liability for the client data you hold — paired with E&O so the two policies overlap correctly.
Learn about this coverThird-party bodily injury, property damage and office property cover — the baseline a landlord, co-working space or client will require evidence of.
Learn about this coverEmployment-practices cover and statutory comp — set up correctly for distributed and remote teams, where most professional services firms now operate.
Learn about this coverWe read the contract before you sign. If a client wants unusual coverage triggers, defence-outside-limits or specific additional-insured language, you'll know — and we'll bind to it.
Most carriers default to a generic 'misc. professional' rate. We work with the specialty markets that price consultants, agencies and advisory firms on their actual risk profile.
Big-client wins should trigger a coverage review, not a panic. We re-shop limits whenever your contract size or service mix changes — without re-marketing the entire programme.
A few details about what you do, your size and any contract or licensing requirements you're working against.
We compare carriers that price your kind of business well, and bring back real options side by side.
Choose the option that fits, get your certificate, and know exactly what's covered — with us on the line if something happens.
Law firms over-index on ransomware in their cyber planning. The faster-growing claim is silent exfiltration of client matter data — and the policy response is different.
Accountants over-rely on professional liability as their whole insurance programme. Here are the four other lines that actually matter for a CPA practice in 2026.
A Canadian tribunal made Air Canada eat the cost of its own chatbot's bad advice. What that ruling means for any firm shipping AI features in 2026.
Tell us about your firm and the kind of clients you sign. We'll shop the specialty E&O markets and bind to the exact limit, trigger and additional-insured language your contracts require.