16.3 Cyber, Aviation, and Other Specialty Lines
Key Takeaways
- Cyber liability splits into first-party (the insured's own breach costs) and third-party (liability to others); both are usually written on claims-made forms.
- Aviation coverage separates hull (physical damage to the aircraft) from liability, and uses single limit and split limits like auto.
- Inland marine covers movable property and property in transit; ocean marine covers hull, cargo, freight, and protection and indemnity.
- Specialty lines such as professional liability, D&O, and EPLI are typically claims-made with a retroactive date and tail-coverage options.
- Excess and surplus lines (E&S) markets handle hard-to-place specialty risks the standard market declines.
Cyber Liability Insurance
Cyber liability responds to data breaches, ransomware, and network-security failures. It divides along the familiar first-party / third-party line.
- First-party coverage - the insured's own costs: forensic investigation, data restoration, business interruption, cyber extortion / ransomware payments, and customer notification.
- Third-party coverage - the insured's liability to others: lawsuits and regulatory fines from a breach of customers' or employees' private data, plus media/content liability.
Most cyber forms are written on a claims-made basis, meaning the claim must be made (and reported) during the policy period (or extended reporting period), and the wrongful act must occur on or after the retroactive date.
Worked example. A retailer with a $1,000,000 cyber limit and a $25,000 deductible suffers a breach costing $40,000 in forensics (first-party) and faces a $300,000 customer lawsuit (third-party). The insurer pays $40,000 - $25,000 = $15,000 on the first-party loss, then defends and indemnifies the third-party suit up to the remaining limit.
Claims-Made vs. Occurrence
Most specialty liability uses claims-made triggers, so understand the contrast:
- Occurrence - covers injury/damage that happens during the policy period, no matter when the claim is filed (the standard for general liability).
- Claims-made - covers claims first made during the policy period for wrongful acts on or after the retroactive date.
When a claims-made policy is not renewed, an Extended Reporting Period (ERP), or tail, lets the insured report later claims for in-force wrongful acts. A basic tail is automatic and short (e.g., 60 days); a supplemental tail is purchased for a longer or unlimited window.
Aviation Insurance
Aviation mirrors auto's structure but for aircraft:
| Coverage | Protects |
|---|---|
| Hull | Physical damage to the aircraft (in-motion, not-in-motion, or in-flight) |
| Liability | Bodily injury and property damage to others, including passengers |
Liability can be written as a combined single limit (CSL) or as split limits. A split limit such as $1,000,000/$100,000 means $1,000,000 per occurrence for liability excluding passengers, with a $100,000 sublimit per passenger seat. A CSL of $1,000,000 applies one aggregate amount to all bodily injury and property damage per occurrence.
Split-limit worked example. A four-seat aircraft carries $1,000,000/$100,000 coverage. A crash injures three passengers with combined claims of $360,000. The per-seat sublimit caps each passenger at $100,000, so the most payable for passengers is 3 x $100,000 = $300,000; the remaining $60,000 is the owner's exposure. Hull damage is settled separately under the hull section, typically on a stated-value or agreed-value basis.
Marine Insurance
- Ocean marine - one of the oldest lines; covers four interests: hull (the vessel), cargo, freight (the shipping revenue), and protection and indemnity (P&I) liability.
- Inland marine - evolved from ocean marine to cover property in transit over land and movable / floating property (contractors' equipment, fine arts, jewelry, bailee risks). The nationwide marine definition sets the classes eligible for inland marine.
Common inland marine forms include the Commercial Articles Coverage Form, Equipment Floaters for mobile machinery, Motor Truck Cargo for carriers' liability for goods hauled, and Transportation/Trip Transit policies. Many inland marine forms are written on an open-perils (all-risk) basis with agreed value, which avoids coinsurance disputes - a key selling point versus a property form.
Other Specialty Liability
- Professional liability / Errors & Omissions (E&O) - covers economic loss from a professional's mistakes (claims-made). Medical malpractice is the healthcare variant.
- Directors & Officers (D&O) - protects corporate leaders for wrongful management acts; Side A covers individuals, Side B reimburses the company, Side C covers entity securities claims.
- Employment Practices Liability Insurance (EPLI) - covers wrongful termination, discrimination, and harassment claims.
- Environmental / pollution liability - fills the absolute pollution exclusion in standard general liability forms.
- Kidnap and ransom (K&R) - reimburses ransom, extortion, and crisis-response costs.
These claims-made products use a retroactive date so prior acts before that date are excluded.
Terrorism - TRIA
The Terrorism Risk Insurance Act (TRIA) is a federal backstop requiring commercial insurers to offer terrorism coverage; the insured may accept or reject it in writing. The federal government shares catastrophic terrorism losses above program triggers, keeping the coverage available and affordable.
Excess and Surplus Lines
When the admitted standard market declines a risk, it flows to excess and surplus (E&S) lines carriers - non-admitted insurers placed through specially licensed surplus-lines brokers under a diligent-search rule (proof the standard market declined). Because they are non-admitted, E&S carriers are not backed by the state guaranty fund, a frequent exam point. E&S handles unusual cyber, aviation, and high-hazard specialty risks.
Exam traps:
- Inland marine = property that moves or is portable; ocean marine = waterborne and its four interests. Do not assign cargo-in-transit-over-land to ocean marine.
- Surplus-lines (non-admitted) policies are not protected by state guaranty associations.
- Aircraft 'in flight,' 'in motion,' and 'not in motion' are distinct hull definitions that change the rate and coverage trigger.
Cyber Coverage: First-Party vs. Third-Party Components
Cyber liability policies are tested for their split between the insured's own losses and liability to others:
| First-party (the insured's own loss) | Third-party (liability to others) |
|---|---|
| Breach notification costs | Network security liability |
| Forensic investigation | Privacy liability (failure to protect data) |
| Business interruption from a cyber event | Media/content liability |
| Cyber extortion / ransomware payment | Regulatory fines/defense (where insurable) |
| Data restoration |
Most cyber policies are written on a claims-made basis with a retroactive date, mirroring professional liability — a frequent exam crossover point. Social-engineering / funds-transfer fraud is often a sublimit and may overlap with crime coverage.
Aviation and Other Specialty Lines
Aviation is excluded from standard property and CGL forms and is written on specialty markets:
- Hull — physical damage to the aircraft (in-flight, taxiing, or not-in-motion bases).
- Aircraft liability — BI/PD to third parties; may be split as passenger vs. non-passenger liability or written as a single limit.
- Admitted vs. non-admitted (surplus lines): specialty exposures (aviation, large cyber, professional, environmental) frequently route to the surplus lines market through a surplus lines broker because admitted carriers will not write them. Surplus lines are not protected by the state guaranty fund — a tested consumer-protection point.
| Specialty line | Typical coverage |
|---|---|
| Difference in Conditions (DIC) | Fills gaps (flood/quake) above/around primary property |
| Kidnap & Ransom | Reimburses ransom, crisis costs |
| Environmental / Pollution Legal Liability | Cleanup and third-party pollution claims |
| Event cancellation | Lost revenue from canceled events |
Worked trap: a ransomware attack shuts a business for a week. Cyber first-party business-interruption responds (a non-physical trigger), whereas the commercial property Business Income form generally requires direct physical loss by a covered peril and would not pay — illustrating why standalone cyber exists. Surplus-lines placement means no guaranty-fund backstop, which the producer must disclose.
Which is an example of FIRST-party cyber coverage?
Contractors' mobile equipment that travels between job sites is most appropriately insured under which line?
An insured buys a policy from a non-admitted surplus lines carrier. Which statement is correct?