Home cyber insurance and cyberbullying coverage

Home cyber insurance is an optional endorsement, sold by a growing number of homeowners insurers, that pays for the aftermath of a digital attack on your household. Depending on the insurer, that can mean restoring data and devices after malware, getting expert help with an extortion demand, reimbursing some online fraud, and covering counseling and other costs after cyberbullying. A standard homeowners policy was built for physical losses such as fire, theft and water and generally does not respond to a ransomware lock on a laptop.

Limits are usually modest, in the tens of thousands of dollars, and the wording varies more than for almost any other endorsement. Read the form, not the brochure.

How big the exposure is

The FBI's Internet Crime Complaint Center (IC3) received 1,008,597 complaints in 2025, with reported losses of $20.877 billion, according to its 2025 annual report. The most reported crime type was phishing and spoofing, at 191,561 complaints. Extortion drew 89,129, personal data breaches 67,456 and harassment or stalking 21,557. Ransomware, which dominates headlines, accounted for 3,611 complaints in the report.

Two cautions go with those numbers. They include business victims, and they count only what people report. The FTC separately reported in June 2026 that consumers lost about $16 billion to fraud in 2025, roughly 25% more than in 2024. The point for a homeowner is not that a catastrophic loss is likely, but that the most common events are scams and account takeovers, not dramatic ransomware.

What home cyber endorsements typically cover

Insurers use different names, so read the form for the actual list. These descriptions come from insurers' own materials.

The identity piece often overlaps with identity theft coverage on a homeowners policy, and an insurer may bundle the two. Legal exposure for what you post or say online is its own coverage, covered in personal injury coverage: libel, slander and false arrest.

Limits and deductibles

Published figures show how modest these are:

• State Farm's page lists a $15,000 combined annual limit for cyber attack and cyber extortion coverage and a $500 per-occurrence deductible. It is part of a package of cyber event, identity restoration and fraud loss coverage for homeowners, renters and condo owners, and it is not available in every state.
• Andover's brochure offers $25,000 or $50,000 limits with a $500 deductible, and says coverage applies only to cyber events detected during the policy period.
• Arbella announced its Home Cyber Protection endorsement in April 2019 with $25,000 and $50,000 options, according to IA Magazine.
• Cincinnati Insurance describes its personal cyber protection as covering cyberattacks, cyber extortion and online fraud, and its page directs customers to an independent agent for details instead of listing limits.

Auto-Owners Insurance, Tower Hill Insurance, Mercury Insurance, Safety Insurance, Selective Insurance, Westfield Insurance and many others also list a home cyber endorsement, and availability differs by state.

What it won't do

• Prevent an attack. It reimburses afterward.
• Cover what you already knew about. Coverage depends on when the event is discovered, as Andover's brochure says, so you can't buy it after the hack.
• Cover business losses. If you work from home, a home-business or business cyber policy is separate. See running a business from home: the insurance gaps.
• Replace your bank's protections. Federal rules limit your liability for unauthorized card and electronic transfers, and a policy that pays after your bank does is rarely the main safeguard.
• Settle every fraud case. When you were tricked into sending money yourself, coverage varies. State Farm's page says its fraud loss coverage reaches deception that induces you to give up something of value, but other forms may not. Ask.

Cyberbullying coverage in practice

The cyberbullying piece is the feature that surprises people, and it pays for response costs, not damages for the victim. Typical items are counseling for a child, a cybersecurity consultant and, in some forms, temporary relocation. Some forms also cover the other side: Acuity's endorsement includes legal expense and damages if you are accused of cyberbullying, which matters for a family with teenagers. Definitions, age thresholds and who counts as an insured vary, so ask whether a minor household member is covered both as a victim and as a defendant.

Who might want it

It makes the most sense for households with children online, for people with many connected devices, for those who bank and pay bills online and for anyone who would struggle to pay a few thousand dollars for professional recovery. It makes less sense if the price is high next to the limit, if you already have the identity piece through another policy, or if you take basic precautions such as a password manager and multi-factor authentication and keep backups.

No insurance replaces those precautions. Backups of photos and documents, strong unique passwords, software updates and wariness about unexpected messages stop most of what the endorsement would otherwise pay for. See phishing scams that impersonate insurers for one common route in, and smart home technology and insurers for the wider connected-home picture.

A hypothetical example

Say malware encrypts the family computer and demands payment. A technician charges $2,800 to remove it and restore data from the last backup. With a $25,000 limit and a $500 deductible, the endorsement would reimburse about $2,300, subject to the form. Without it, the $2,800 is yours. If the same household also faces a cyberbullying incident involving a teenager that leads to $1,200 of counseling, a form with cyberbullying coverage could add to the claim, with the same deductible rules. Without cyberbullying coverage, the counseling is your cost. These are invented numbers.

Questions to ask before you buy

1. Which events are covered: attack, extortion, fraud, cyberbullying, data breach, liability?
2. What are the limits, sublimits and the deductible?
3. Does it reimburse a ransom payment, or only response costs?
4. Which devices and accounts are covered, including smart-home devices?
5. Does fraud coverage apply if I authorized the payment under false pretenses?
6. Is a minor household member covered as a victim and as a defendant?
7. What is the discovery or reporting requirement?
8. Is the coverage excluded for business use of my devices?

If it happens

1. Disconnect the device and change passwords from a clean device.
2. Call your bank or card issuer immediately about any fraud.
3. Report to IC3 at ic3.gov and to the FTC at ReportFraud.ftc.gov. Rapid reports can help recovery.
4. Notify your insurer and keep invoices for technicians and counseling.
5. Talk to your insurer and law enforcement before paying any ransom, and ask the insurer what its form requires.

Key takeaways

• Home cyber endorsements pay for recovery after an attack, with typical published limits of $15,000 to $50,000 and a $500 deductible. They do not prevent attacks.
• Common features are data restoration, extortion response, online fraud and cyberbullying costs, but forms differ widely.
• The biggest differences are whether the ransom itself is reimbursed, whether tricked payments are covered and whether the policy covers you as a defendant.
• Coverage depends on discovery during the policy period and excludes business use.
• Backups, strong passwords and multi-factor authentication stop most losses before an endorsement is needed.