A manager of a facility accidentally clicks on a malware link embedded in a fraudulent e-mail (phishing); a third-party hacker penetrates the company’s data network (ransomware); an employee sends funds to pay an invoice that appears to come from an authorized e-mail address or from the company’s bank or personal banker (wire fraud); a terminated employee steals credit card information from the facility’s customers on the way out the door (criminal theft).
What would your business do if any of these scenarios occurred and tenant records were stolen or your access to business data was blocked? How would your company handle the cost to recover the data, repair your IT system, pay for the required customer notifications and identity theft protection, and manage the cost of the interruption to your business?
Cyber Liability Insurance
Any business that fails to recognize these risks and prepare for them may find itself financially crippled by such events. One of the ways to address the exposure to these potential risks is by obtaining cyber liability insurance. Today, this coverage is as vital as a self-storage facility’s sale and disposal insurance. But like sale and disposal insurance, sufficient cyber and data theft insurance coverage is not typically included in a general liability policy. Instead, operators need to consider their risks, underwrite their exposure and obtain the needed coverage for their business.
A proper cyber liability and data theft insurance policy would include the following protections:
- Providing a response team to assist the business after an incident (including a forensic specialist to locate the site of the breach, the suspected malware, or the independent cause of the loss)
- Paying the costs necessary to recover the lost data, including paying the ransom demanded for the return of the data, if necessary
- Providing the logistical support and cost reimbursement for the required customer and credit bureau notifications (and identity theft protections)
- Reimbursing the costs associated with the interruption suffered by your business while dealing with the breach.
Review Your Insurance Coverage
Self-storage operations are not immune from these real-life threats. Even a business that makes every effort to protect its data is not immune from third party criminal activity. A good cyber liability policy includes not only first party coverage to protect your business, but third-party coverage to protect the costs incurred by your customers and their businesses and personal lives. The next time you review your insurance coverage, be sure to double check what you are now carrying for the risk of cyber liability and data breach protection. You may be surprised what coverages you have or don’t have.
Stay Safe and Happy Storing! (Thanks to Jessica Lamoureux from World Insurance for sending me the information for this article.)
Scott
—
Scott Zucker is a partner at Weissmann Zucker Euster & Katz, P.C., a law firm based out of Atlanta, Georgia and is a partner in the Self Storage Legal Network, a legal information service available through the national Self Storage Association.