If hackers gain control of critical systems, they may demand a ransom be paid to avoid additional consequences. Sometimes these can be empty threats, but it’s impossible to know for sure. Paying the ransom can be costly. Taking a chance by choosing not to pay can sometimes put a company out of business.

Coverage for ransom and cyber extortion can be included in cyber liability policies and can help cover the cost of ransom to regain control of network systems. This is often not included in a standard policy, may include a separate sublimit and deductible, and may require adherence to certain conditions set forth by the insurer.