Cyber, Aviation, and Other Specialty Lines
Key Takeaways
- Cyber policies split into first-party coverage (the insured's own losses: breach response, business interruption, cyber extortion) and third-party liability (claims by others, e.g., privacy/network security liability).
- Aviation coverage uses hull (physical damage to aircraft) and liability; passenger and cargo liability are often written with combined single limits or per-passenger limits.
- Inland marine forms (floaters, ISO Commercial Inland Marine) cover mobile/specialized property and use Agreed Value rather than ACV on scheduled items.
- Specialty lines fill gaps standard ISO forms exclude: pollution/environmental, professional liability (E&O), D&O, and EPLI.
Cyber insurance: first-party vs. third-party
Standard CGL and property forms largely exclude electronic data loss and breach liability, so cyber is written on dedicated specialty forms. The single most-tested concept is the first-party / third-party split:
| Side | Pays for | Examples |
|---|---|---|
| First-party | The insured's OWN losses | Breach-response/notification costs, forensic investigation, cyber business interruption, data restoration, cyber extortion/ransomware payments |
| Third-party | Claims brought AGAINST the insured by others | Privacy liability, network-security liability, regulatory fines/defense, media/content liability |
Most cyber policies are written on a claims-made basis with a retroactive date, and they carry sublimits and a self-insured retention (similar to a deductible) per claim. A common trap: ransomware extortion payments are first-party, not a liability claim.
Cyber Liability Insurance
Cyber policies cover losses from data breaches, hacking, ransomware, and privacy violations - exposures the CGL and property forms largely exclude. Coverage splits into first-party and third-party:
| First-party (the insured's own loss) | Third-party (liability to others) |
|---|---|
| Breach-response/notification costs | Privacy liability to affected individuals |
| Data restoration | Regulatory fines/defense (where insurable) |
| Business interruption from a cyber event | Media/content liability |
| Cyber extortion (ransomware) | Failure to safeguard data |
Most cyber policies are claims-made, with breach-response services (forensics, credit monitoring, legal) often provided on a per-event basis.
Aviation Insurance
Aviation is a specialty line excluded from the CGL and auto. It parallels auto/property in structure:
| Coverage | Insures |
|---|---|
| Hull | Physical damage to the aircraft (in-flight, taxiing, not-in-motion) |
| Liability | BI/PD to passengers and third parties |
| Admitted/Non-admitted liability | Passenger liability split |
| Medical payments | No-fault occupant medical |
Other Specialty Lines
- Difference in Conditions (DIC) - broadens a property program, often adding flood/earthquake.
- Kidnap & Ransom, Event Cancellation, Pollution/Environmental, Terrorism (TRIA backstop).
Worked Example
A retailer suffers a ransomware attack: hackers encrypt its systems and steal 50,000 customers' card numbers. The retailer's property policy (physical loss only) and CGL (excludes data/privacy) do not respond. Its cyber policy pays first-party costs (forensics, system restoration, the ransom decision, and customer notification) and defends the third-party privacy claims and regulatory inquiry. Separately, a charter operator's plane is damaged on the taxiway - aviation hull responds, not the BACF (autos) or CGL (aircraft excluded).
Recognizing that cyber and aviation fill gaps the standard property/CGL/auto forms exclude is the central specialty-lines concept.
A company pays $75,000 to a ransomware attacker to unlock its systems and $50,000 in forensic and customer-notification costs. Which part of a cyber policy responds?
Aviation insurance
Aviation is excluded from most standard liability and property programs and is written by specialty aviation insurers. The two pillars mirror auto coverage:
- Hull coverage - physical damage to the aircraft itself. Written on an agreed value (stated value) basis. May be written 'in motion,' 'not in motion,' and 'in flight' with different rates.
- Aviation liability - bodily injury and property damage to others. Subdivided into:
- Bodily injury excluding passengers (third parties on the ground),
- Passenger bodily injury (often a per-seat / per-passenger limit), and
- Property damage liability.
Limits are frequently shown as a combined single limit (CSL) or as a per-passenger split (e.g., '$1,000,000 each passenger / $5,000,000 each occurrence'). Worked split-limit example: With a $1M-per-passenger / $5M-per-occurrence policy, a crash injuring 6 passengers caps each passenger's recovery at $1M, but total passenger payouts cannot exceed the $5M occurrence cap - so the insurer pays at most $5M for all six combined, not $6M.
Inland marine and floaters
Inland marine evolved from ocean marine to cover property that moves or is held by a bailee, plus 'instrumentalities of transportation/communication' (bridges, radio towers). The ISO Commercial Inland Marine program and various floaters cover items standard property forms exclude or sublimit.
Common floaters: Contractors' Equipment, Builders' Risk, Jewelers' Block, Motor Truck Cargo, Electronic Data Processing, Accounts Receivable, Valuable Papers, and the personal Personal Articles Floater.
Key distinction: scheduled inland-marine items are usually written on an Agreed Value basis (the insurer waives any ACV/depreciation argument for the listed amount), which differs from the ACV default in standard property coverage. Inland marine is also typically broad/open-peril ('all-risk') and often has no coinsurance clause on scheduled items.
The Nationwide Marine Definition
The Nationwide Marine Definition sets out the classes of property eligible for inland (and ocean) marine writing, keeping insurers from using marine forms to evade rate regulation on ordinary fixed property. The recognized categories are: imports and exports, domestic shipments (goods in transit), instrumentalities of transportation and communication (bridges, tunnels, pipelines, towers), personal property floaters, and commercial property floaters.
Worked example - bailee exposure: A jeweler's repair shop holds $400,000 of customers' rings. The shop's commercial property policy excludes property of others left for service. A Jewelers' Block policy (inland marine) covers this bailee exposure on an open-peril, agreed-value basis. If a $60,000 theft occurs, the floater pays the loss subject to its deductible - the shop's standard property policy would have denied it. This is why bailees (cleaners, processors, repairers) routinely buy a bailee customers floater.
Which feature most distinguishes a scheduled inland marine floater from standard commercial property coverage?
Other specialty lines: the liability family
Several management and professional exposures are excluded by the CGL and require standalone specialty forms - almost all claims-made:
- Professional liability / Errors & Omissions (E&O) - covers financial harm from a professional's negligent act, error, or omission (no bodily injury required). Examples: insurance-agent E&O, medical malpractice, lawyers' professional liability.
- Directors & Officers (D&O) - protects company executives and the entity against claims arising from management decisions (mismanagement, breach of fiduciary duty).
- Employment Practices Liability (EPLI) - covers wrongful termination, discrimination, harassment, and retaliation claims by employees.
- Environmental/Pollution liability - the CGL's broad pollution exclusion leaves clean-up and pollution bodily injury for site-pollution and contractors' pollution policies.
Exam trap: CGL covers bodily injury and property damage from an occurrence; it does not cover the insured's professional errors, management decisions, employment acts, or gradual pollution - those need the specialty forms above.
An insurance agency is sued because a producer failed to add flood coverage a client requested, and a flood later caused an uncovered loss. Which policy responds for the agency?