One breach can cost more than a year of revenue
The average cost of a small business data breach in the U.S. now runs well into six figures once you factor in forensic investigation, breach notification letters, regulatory fines, and legal fees. Healthcare, financial services, and legal firms pay more because their records carry higher sensitivity and stricter compliance obligations. A stolen patient record costs significantly more per record to resolve than a stolen retail loyalty account.
Cyber liability insurance covers first-party costs like ransomware negotiation and system recovery, as well as third-party costs like customer lawsuits and regulatory penalties. Coverage limits of $1M are standard for most small and mid-size firms; companies handling sensitive data for large clients often need $2M or more. Businesses that provide professional services should also consider professional liability (E&O) insurance, which covers a separate but related risk: claims that your service or advice caused a client financial harm.
By Jessica Martinez | Updated June 2026
Jessica covers small-business insurance and financial planning. Her work has appeared across several business and finance publications.