Cyber Insurance Coverage for Data Breach, Ransomware, and Online Fraud

India is now among the most cyber-targeted countries in the world. The Indian Cyber Crime Coordination Centre (I4C) recorded over 28 lakh cybercrime cases in 2025, with financial losses touching ₹22,495 crore, a 206% jump from the previous year.

The threat has also shifted. Where corporate breaches once dominated headlines, individuals now account for the majority of financial losses. In 2024, 60% of fraud victims were people making their first digital payment. UPI fraud cases rose 85%. Ransomware groups have moved beyond enterprises to target hospitals, insurance firms, and financial institutions, with cascading effects on the individuals whose data those companies hold. In October 2024 alone, a breach at an Indian health insurance company exposed the records of over 31 million customers.

Cybersecurity software, strong passwords, and two-factor authentication reduce the odds of a breach. They do not eliminate them. Cyber insurance is the financial layer that handles what happens when defences fail.

What Cyber Insurance Covers Under Bajaj General's Policy?

Bajaj General Insurance's Individual Cyber Safe Policy covers ten distinct categories of digital risk under a single product. Here is what each category actually protects against.

1. Data Breach and Privacy Cover

If personal data, Aadhaar, PAN, banking credentials, or health records are exposed through a breach involving you, the policy covers:

• Financial losses directly resulting from the exposure
• Legal costs and defence expenses if third parties file claims against you
• Notification costs and administrative expenses
• Damages against third parties for privacy and data breach claims

2. Ransomware and Cyber Extortion Cover

Ransomware attacks, where criminals encrypt your files or lock devices and demand payment, are among the fastest-growing threats in India. The policy covers:

• Financial losses due to extortion or associated costs
• Legal and prosecution costs for filing criminal cases against the extortionist
• Defence costs for third-party claims that arise from the extortion event
• Data restoration and system recovery expenses

3. Malware Cover

Covers financial loss and restoration costs when malicious software damages, destroys, or corrupts your digital data or devices. The restoration cost-benefit specifically covers expenses to retrieve or reinstall data or computer programs that were damaged by malware.

4. Phishing Cover

Financial losses resulting from being an innocent victim of phishing attacks, where fraudulent messages or emails deceive you into revealing credentials, transferring funds, or clicking malicious links. Bajaj General's policy specifically covers financial loss where you are an innocent victim of email spoofing and phishing.

5. Identity Theft Cover

When a criminal uses your identity, Aadhaar, PAN, and banking credentials to commit fraud in your name, the coverage extends to:

• Legal and professional costs to restore your identity
• Defence and prosecution costs related to identity theft
• Expenses involved in correcting records with banks, credit bureaus, and other institutions
• Financial losses sustained as a direct result of the theft

6. IT Theft Loss Cover

Financial loss arising from an unauthorised electronic funds transfer, in which money is taken from your banking or payment accounts through cyber-enabled theft.

7. Email Spoofing Cover

Fraudulent emails manipulate you into transferring funds to a criminal's account or misuse your email identity to defraud others. The policy covers financial losses and legal costs for pursuing action against perpetrators.

8. Cyber Extortion Cover

Broader than ransomware alone. Covers extortion attempts where criminals threaten to release private information, publish sensitive content, or cause further digital harm unless payment is made. This is particularly relevant given the rise of sextortion and digital blackmail cases in India.

9. Cyber Stalking Cover

Persistent digital harassment causes both financial and psychological harm. The policy covers:

• Legal and prosecution costs if a criminal case is filed against the stalker
• Court fees, documentation charges, and transportation costs relating to pursuing the case
• Counselling services if further harassment results in psychological distress

The inclusion of counselling services is rare in the Indian insurance market and reflects the broader real-world harm that stalking causes.

10. Social Media Cover

If your social media accounts are hacked and used to commit fraud, spread defamatory content, or impersonate you, the policy covers:

• Financial losses from fraudulent transactions initiated through your hacked account
• Legal costs for defamation or harassment arising from the misuse of your profile
• Expenses related to restoring your digital identity after an account takeover

Additional services included:

• IT Consultants Services: Professional support to identify how a breach occurred, strengthen your security, and prevent recurrence
• Counselling Services: For psychological distress caused by cyber events

What Cyber Insurance Does Not Cover?

Understanding exclusions matters as much as knowing the inclusions. Common exclusions across cyber insurance policies in India include:

• Pre-existing cyber events: Any incident that began before the policy period is not covered
• Failure to maintain basic security controls: If you do not maintain updated antivirus software, secure passwords, or basic protective measures, claims may be denied
• Deliberate acts by the insured: Losses arising from your own fraudulent conduct
• Physical damage to hardware: Damage to laptops, phones, or servers from physical causes (fire, water, theft of a device) is not covered under cyber insurance
• Intellectual property theft: Loss of patents, trademarks, or copyrights is typically excluded
• Losses without documentation, Claims where you cannot provide police reports, transaction records, or supporting documentation may be rejected
• Late notification: The policy requires written notice of an incident within 7 days of discovery. Delayed reporting can lead to claim rejection
• Losses from unauthorised access due to shared credentials: If you have voluntarily shared your OTP or password with another person, claims arising from that disclosure may not be covered

Who Should Buy Cyber Insurance?

The realistic list is broader than most people assume:

• Individuals who bank digitally, use UPI, shop online, or maintain a meaningful social media presence are now the majority of urban Indians. Bajaj General's Individual Cyber Safe Policy covers anyone aged 18 and above.
• Senior citizens who are statistically more likely to fall victim to phishing, OTP fraud, and digital arrest scams. The average financial loss from a single digital arrest scam runs into lakhs.
• Small business owners and freelancers whose income and client relationships depend on digital platforms, where compromising business accounts can disrupt operations for weeks.
• Working professionals handling financial transactions, client data, or sensitive work communications digitally, where a single email spoofing incident can result in significant funds being transferred to fraudulent accounts.
• High-value social media users, creators, professionals, and businesses for whom an account takeover carries meaningful reputational and financial costs.

How Much Cyber Insurance Coverage Is Enough?

Bajaj General Insurance's cyber policy offers sum insured options ranging from ₹1 lakh to ₹1 crore. The right level depends on your specific digital footprint and financial exposure.

For most individuals, a starting sum insured of ₹5–10 lakh is sufficient to cover realistic exposures to phishing, OTP fraud, and identity theft. Higher sums make sense if:

• You maintain high-value bank balances or run substantial UPI transaction volumes
• You are the sole earning member of your family and cannot absorb a large financial loss
• You operate a small business handling customer or payment data
• You are a public figure or content creator whose reputation depends on social media integrity

The premium for cyber insurance in India remains modest relative to potential losses. Even the highest-tier ₹1 crore cover costs only a small fraction of a single serious breach.

Cyber Insurance for Businesses

While Bajaj General's Individual Cyber Safe Policy is designed for personal coverage, businesses require broader cyber insurance structures. Business-level cyber insurance typically covers:

• First-party losses, direct financial harm to your business, including data recovery, business interruption, and ransom payments where legally permissible
• Third-party liability, claims from customers, partners, or regulators when their data is compromised through your systems
• Regulatory penalties, fines and legal expenses arising from data protection regulations, particularly under the Digital Personal Data Protection Act 2023
• Notification costs, expenses to inform affected customers about a breach as required under law

Cyber insurance for businesses is priced based on revenue, sector, data sensitivity, and existing security posture. Businesses with strong security controls, MFA, employee training, and regular backups qualify for lower premiums.

Conclusion

Cyber insurance is not about paranoia. It is about acknowledging that, in 2026, financial and personal digital exposure is a normal part of Indian life, and that the systems built to protect against it are not always successful. 

Bajaj General Insurance's Cyber Safe Policy, the first of its kind in India, covers the ten most common cyber risks under a single product, with sum insured options ranging from ₹1 lakh to ₹1 crore, legal support, financial reimbursement, and built-in psychological counselling. 

For an annual premium lower than what most people spend on a family dinner out, it is one of the most underappreciated and cost-effective forms of insurance available in India today.