16.3 Cyber, Aviation, and Other Specialty Lines

Cyber Liability Insurance

Standard CGL and property forms increasingly exclude cyber exposures, so cyber liability is a dedicated specialty line. It splits into two halves:

• First-party cyber - the insured's own costs: forensics, data restoration, business interruption / extra expense from a network outage, cyber extortion (ransomware) payments, and breach-notification expenses required by state law.
• Third-party cyber - liability to others: privacy liability for releasing confidential data, network security liability for transmitting malware, regulatory fines/defense, and media/content liability.

Most cyber forms are written on a claims-made basis with a retroactive date - the wrongful act (e.g., the breach) must occur on or after the retro date and the claim must be reported during the policy period or extended reporting period.

Cyber Trap and a Worked Sublimit

A common exam trap: social engineering / funds-transfer fraud is often excluded from base cyber and base crime forms and must be added by endorsement, frequently with a sublimit.

Worked example - sublimit and deductible: A policy carries a $2,000,000 cyber aggregate but a $100,000 social-engineering sublimit with a $10,000 deductible. An employee is tricked by a spoofed email into wiring $150,000 to a fraudster. Recovery = lesser of loss or sublimit, minus deductible = ($100,000 sublimit) - $10,000 = $90,000. The $50,000 above the sublimit is uninsured. Always apply the sublimit before subtracting the deductible.

Aviation Insurance

Aircraft are excluded from personal auto, homeowners, and most commercial policies, so aviation insurance is a specialty line with its own terminology:

Aviation liability is commonly expressed with split limits, e.g., "$1,000,000 each person / $5,000,000 each occurrence / $1,000,000 property damage." A combined single limit (CSL) merges these into one number applicable to BI and PD together.

Worked Split-Limit Aviation Loss

Example: A policy reads $1,000,000 per person / $5,000,000 per occurrence for passenger liability. A crash injures four passengers with claims of $1,200,000, $900,000, $700,000, and $600,000.

• Passenger 1 is capped at the $1,000,000 per-person limit (loses $200,000).
• Passengers 2-4 are paid in full: $900,000 + $700,000 + $600,000 = $2,200,000.
• Subtotal = $1,000,000 + $2,200,000 = $3,200,000, which is under the $5,000,000 per-occurrence cap, so the insurer pays $3,200,000.

If the four claims had totaled above $5,000,000 after per-person caps, the occurrence limit would prorate the available $5,000,000. Always apply per-person limits first, then test the per-occurrence cap.

Other Specialty Lines to Know

• Ocean marine - hull, cargo, freight, and protection & indemnity (P&I) liability; governed largely by admiralty law and standard clauses (e.g., free of particular average).
• Inland marine - property in transit or that is mobile/floating (contractors' equipment, fine arts, bailee, builders risk); grew out of marine and follows the nationwide marine definition.
• Errors & Omissions (E&O) / Professional liability - covers economic loss from negligent professional services; claims-made with retro dates, like cyber. Distinguish from CGL, which covers bodily injury and property damage, not pure financial loss from advice.
• Directors & Officers (D&O) - protects company leadership against management-decision claims.
• Surplus lines - high-risk or unusual exposures placed with non-admitted insurers when admitted markets decline the risk; the insured signs a diligent-search affidavit and these policies are not protected by state guaranty funds.

Cyber Liability — First-Party vs. Third-Party

Cyber policies split into first-party coverage (the insured's own losses: data restoration, business interruption from a network outage, cyber-extortion/ransom, breach-notification and credit-monitoring costs, public-relations expense) and third-party coverage (the insured's liability to others: privacy and network-security liability, media/content liability, regulatory fines where insurable).

Because the standard CGL treats data as intangible and excludes most cyber events, a separate cyber policy is essential. Cyber coverage is typically claims-made with sublimits for ransom and notification that erode the aggregate.

Aviation Lines and Other Specialty Coverages

Aviation insurance parallels auto but for aircraft: hull coverage (physical damage, written in flight, in motion, or not in motion), liability for bodily injury and property damage to passengers and third parties, and admitted/non-admitted placement given the specialized market. A common structure is a split limit with a per-passenger sublimit.

Worked split-limit aviation loss: a policy reading $1,000,000 each person / $5,000,000 each occurrence / passenger limit $100,000 each caps any single passenger's recovery at $100,000 even though the occurrence limit is $5,000,000. Other specialty lines to recognize: boiler & machinery / equipment breakdown (sudden mechanical/electrical breakdown, an exclusion under most property forms), difference-in-conditions (DIC) filling gaps like flood/quake, and kidnap & ransom coverage.

Equipment Breakdown, DIC, and Other Specialty Lines

Round out the specialty map. Boiler & Machinery / Equipment Breakdown covers sudden and accidental mechanical or electrical breakdown of pressure vessels, transformers, and HVAC — losses the property special form excludes as "mechanical breakdown"; it pays property damage, business income, and includes valuable inspection services.

Difference-in-Conditions (DIC) is a separate, broad open-peril policy bought to fill gaps in a property program, commonly adding flood and earthquake. Kidnap & Ransom reimburses ransom, crisis-response, and related costs. Surplus lines (nonadmitted) carry these hard-to-place risks, which is why a producer needs a separate surplus-lines authority and must disclose the nonadmitted status to the insured.