16.3 Cyber, Aviation, and Other Specialty Lines
Key Takeaways
- Cyber policies split first-party costs (breach response, business interruption) from third-party liability (privacy claims).
- Aviation insurance separates hull (physical damage) from liability, and aircraft are excluded under standard commercial auto and CGL.
- Inland and ocean marine cover property in transit and moveable property; the FC&S clause is a hull war exclusion.
- Specialty lines often fill gaps left by standard ISO forms, such as professional liability and pollution.
- Claims-made triggers and sublimits are common exam traps in cyber and professional lines.
Cyber Insurance
Cyber liability insurance addresses losses arising from data breaches, network attacks, and privacy violations that standard property and Commercial General Liability (CGL) forms do not adequately cover. Cyber coverage divides into two halves you must distinguish.
- First-party coverages pay the insured's own costs: breach notification, forensic investigation, credit monitoring, data restoration, cyber extortion (ransomware), and business interruption from a network outage.
- Third-party coverages pay liability the insured owes others: privacy liability, regulatory fines, and defense costs from lawsuits by affected customers.
Claims-Made Trigger and Sublimits
Most cyber policies are written on a claims-made basis, meaning a claim must be both made against the insured and reported during the policy period (subject to a retroactive date), rather than on an occurrence basis.
Watch for sublimits: a cyber policy may carry a $1,000,000 aggregate but only a $250,000 sublimit for social engineering fraud and a $100,000 sublimit for regulatory fines. A loss is capped at the applicable sublimit even when the overall limit is higher. This is a classic distractor on the exam.
Cyber Triggers, Aviation Exclusions, and Specialty Traps
Cyber liability bridges two big exposures: first-party costs (forensic investigation, breach notification, credit monitoring, business interruption, ransomware/cyber-extortion) and third-party liability (claims by customers whose data was exposed). Because the harm often surfaces long after the breach, cyber policies are almost always written on a claims-made basis with a retroactive date, and they carry sublimits for specific costs such as notification or regulatory fines.
Aviation is excluded from both the CGL and the PAP, so any aircraft exposure — corporate jet, drone operations, airport premises — needs a separate aviation policy that combines hull (physical damage) and liability (passengers and ground). Marine specialty lines split into inland marine (movable property, goods in transit, instrumentalities of transportation) and ocean marine (hull, cargo, freight, protection & indemnity).
Worked scenario (cyber claims-made trap): A retailer suffers a data breach in March but does not receive a customer lawsuit until the following February, after renewing onto a new cyber policy with a later retroactive date. If the new policy's retroactive date is after March, the claim is not covered even though it was reported during the new period — the breach predates the retroactive date. This illustrates why preserving a continuous retroactive date is critical, mirroring the rules tested for claims-made CGL and professional liability.
Equipment Breakdown, Pollution, and Worked Specialty Allocation
Two more specialty exposures round out the "other lines" the exam tests. Equipment Breakdown (Boiler & Machinery) covers sudden and accidental mechanical or electrical breakdown of pressure vessels, electrical systems, and production machinery — losses the standard property form excludes as mechanical breakdown. Pollution/environmental policies fill the gap left by the CGL's broad pollution exclusion, covering gradual and sudden contamination, cleanup costs, and third-party bodily injury from pollutants.
| Specialty line | Fills the gap left by |
|---|---|
| Equipment breakdown | Property form's mechanical-breakdown exclusion |
| Environmental/pollution | CGL pollution exclusion |
| Cyber | CGL "electronic data is not tangible property" |
Worked allocation scenario: A factory's electrical transformer fails, arcs, and starts a fire that damages stock. Equipment Breakdown pays for the transformer (the breakdown), while the Commercial Property policy pays for the ensuing fire damage to stock — a coordinated, two-policy settlement the exam likes to test. Separately, if a drum of solvent leaks and contaminates soil, the CGL denies under its pollution exclusion and an environmental policy responds.
Matching each loss to equipment-breakdown, pollution, cyber, aviation, or marine coverage — and recognizing where the standard forms deliberately leave gaps — is the core skill for this section.
A retailer pays a forensic firm to investigate its own breached servers. Which cyber coverage applies?
Aviation Insurance
Aircraft are excluded under standard Commercial Auto and CGL forms, so aviation is a true specialty line. It mirrors auto insurance in structure, splitting into two main parts:
- Hull coverage is physical damage to the aircraft itself, comparable to auto physical damage. It is often written "in motion" and "not in motion," and may be all-risk or named-peril.
- Aviation liability covers bodily injury and property damage to others, and is frequently split between passenger liability and non-passenger (public) liability with separate limits.
Aviation Liability Limits Example
Aviation liability is often written with a combined single limit (CSL) or with split passenger and third-party limits. Worked example: a policy provides a $5,000,000 CSL for each occurrence. A crash injures two passengers ($1,800,000 total) and damages a hangar ($900,000). Total = $2,700,000, fully within the $5,000,000 single limit.
Contrast with split limits: if the policy instead read $1,000,000 per passenger / $3,000,000 each occurrence, the two passenger claims of $900,000 each would each fit the per-passenger cap and sum within the occurrence limit.
Specialty Lines Snapshot
| Specialty Line | Core Exposure Insured | Trigger / Notes |
|---|---|---|
| Cyber liability | Data breach, network security, privacy | Usually claims-made; sublimits for notification/forensics |
| Aviation hull & liability | Aircraft physical damage and BI/PD liability | CGL/PAP exclude aircraft; separate aviation policy needed |
| Inland marine | Movable/transit property, instrumentalities | Open-peril; floaters & Nationwide Marine Definition |
| Pollution / environmental | Gradual & sudden pollution release | CGL pollution exclusion creates the need for separate coverage |
| Boiler & machinery (equipment breakdown) | Sudden mechanical/electrical breakdown | Excluded by standard property forms |
Marine and Other Specialty Lines
Inland marine covers property that moves or is held away from a fixed premises: goods in transit, contractors' equipment, fine arts, and bailee exposures. It evolved from ocean marine and uses the nationwide marine definition to set eligibility.
Ocean marine covers four interests: hull (the vessel), cargo, freight (the shipping revenue), and protection and indemnity (P&I) liability. The Free of Capture and Seizure (FC&S) clause is a standard war-risk exclusion on hull and cargo policies; war coverage must be bought back separately.
Pollution and Environmental
The CGL contains a broad pollution exclusion, so environmental exposures move to specialty markets. Environmental Impairment Liability (EIL) and Contractors Pollution Liability (CPL) policies cover cleanup costs and third-party bodily injury or property damage from a pollution incident.
Exam trap: do not assume a CGL covers a gradual pollution release. It almost never does. The named insured needs a dedicated pollution policy, and these are typically claims-made with a retroactive date, like cyber and professional liability.