Charges & Financial Obligations · Company commitment
Identity theft recovery reimburses restoration expenses up to $1,000,000
The overview says victims of identity theft can be reimbursed for expenses incurred in restoring their identity, up to $1,000,000. The Schedule for the Surfshark One+ program shows the same $1,000,000 figure for Identity Theft Recovery and a $1,000,000 Member Annual Aggregate Limit. This is a reimbursement of listed, qualifying expenses, not a payment of lost money: the covered costs are the ones the definition of identity theft costs lists, and only if the coverage requirements, exclusions and conditions later in the document are met.
Supporting quotations
Victims of an identity theft can get reimbursed for expenses incurred in the process of restoring their identity, up to $1,000,000.
Identity Theft Recovery | $1,000,000
Member Annual Aggregate Limit | $1,000,000
Qualifications & exceptions
The overview is a marketing-style summary; the later definitions, exclusions, limits and conditions control what is actually reimbursed.
The $1,000,000 Identity Theft Recovery limit sits under a $1,000,000 Member Annual Aggregate Limit that covers all coverages together.
Not stated here
The overview does not say who counts as a victim beyond a person who suffers identity theft; the Member definition and the Washington residence exclusion appear later in the document.
Charges & Financial Obligations · Company commitment
Overview lists six kinds of recovery expense, with caps on three
The overview lists these eligible expenses: credit bureau reports; replacement of documents, application fees, notaries and postage; legal fees necessary to undo the negative effects of the identity theft; lost wages and child or elder care for time taken to address the identity theft (up to $5,000); mental health counseling (up to $1,000); and other miscellaneous expenses (up to $1,000). Later text ties the caps to the definition of identity theft costs: lost wages and child and elder care share one sublimit, and that sublimit and the counseling sublimit are part of, not on top of, the Identity Theft Recovery limit. Wages and care costs and counseling costs must be incurred within 12 months after the Member first discovers the stolen identity event. Counseling must come from a licensed mental health professional who is not a relative of the Member.
Supporting quotations
Credit bureau reports
Replacement of documents, application fees, notaries, postage
Legal fees necessary to undo the negative effects of the identity theft
Lost wages and child/elder care for time taken to address the identity theft (up to $5,000)
Mental health counseling (up to $1,000)
Other miscellaneous expenses (up to $1,000)
Item e. (Lost Wages) and item f. (Child and Elder Care Expenses) of the definition of identity theft costs are jointly subject to the sublimit shown in the Schedule of this Summary of Benefits. This sublimit is part of, and not in addition to, the Identity Theft Recovery Coverage Limit. Coverage is limited to wages lost and costs incurred within 12 months after the first discovery of the stolen identity event by the Member.
Coverage is limited to costs incurred within 12 months after the first discovery of the stolen identity event by the Member.
Costs for counseling from a licensed mental health professional. Such care must be provided by a professional care provider who is not a relative of the Member
Qualifications & exceptions
The overview is a summary list; the definition of identity theft costs later in the document states each cost with its own conditions.
The overview does not mention that the caps are inside, not additional to, the $1,000,000 Identity Theft Recovery limit.
Not stated here
The overview does not say whether the 12-month window in the limits text also applies to the other listed expenses.
Charges & Financial Obligations · Company commitment
Schedule: case management for 12 months and Identity Theft Recovery with listed sublimits
For Surfshark One+ the Schedule includes a Case Management Service of 12 months and Identity Theft Recovery of $1,000,000. Within that recovery coverage it shows Legal Costs as "Included" with no separate dollar amount, Lost Wages and Child and Elder Care Expenses at $5,000, Mental Health Counseling at $1,000 and Miscellaneous Unnamed Costs at $1,000. The Limits section says these sublimits are part of, and not in addition to, the Identity Theft Recovery limit. The "Coverage Aggregate Limits" row has no value of its own.
Supporting quotations
Coverage Aggregate Limits
Case Management Service | 12 months
Identity Theft Recovery | $1,000,000
Legal Costs | Included
Lost Wages and Child and Elder Care Expenses | $5,000
Mental Health Counseling | $1,000
Miscellaneous Unnamed Costs | $1,000
This sublimit is part of, and not in addition to, the Identity Theft Recovery Coverage Limit.
Qualifications & exceptions
Legal costs are subject to a sublimit "shown in the Schedule"; the Schedule shows "Included" rather than an amount.
Not stated here
The Schedule does not say what limit applies to legal costs other than that they are included inside the Identity Theft Recovery limit.
Charges & Financial Obligations · Restriction or exception
Seven coverages are listed as Not Included for this program
The Schedule marks Cyber Attack, Cyber Extortion, Online Fraud Reimbursement, Online Scams, Cyberbullying, Home Title Fraud and Data Breach as "Not Included" for Surfshark One+. The document still contains definitions and coverage text for these coverages. The definition of stolen identity event includes events of these kinds only to the extent that the corresponding coverages are included in the insured program, so for this program the Schedule is the place to see which coverages are actually provided.
Supporting quotations
Cyber Attack | Not Included
Cyber Extortion | Not Included
Online Fraud Reimbursement | Not Included
Online Scams | Not Included
Cyberbullying | Not Included
Home Title Fraud | Not Included
Data Breach | Not Included
but only to the extent that such corresponding coverages are included in the insured program
Not stated here
The document does not say outright that every provision about a not-included coverage is inoperative for this program.
Charges & Financial Obligations · Restriction or exception
Schedule shows a $1,000,000 Member Annual Aggregate Limit under "Member Details"
Under the "Member Details" heading the Schedule shows a Member Annual Aggregate Limit of $1,000,000. This is the Schedule figure that the Limits section later describes as the most the insurer pays for one Member in one policy period across all coverages; the Limits section is read with its own cards. The Schedule section read here has no deductible row.
Supporting quotations
Member Details
Member Annual Aggregate Limit | $1,000,000
Not stated here
The document does not state the policy period dates.
Charges & Financial Obligations · Restriction or exception
Cyber extortion means a money demand based on a threat to, or an offer to restore, a Member's device or data
A cyber extortion event involving a computing device or connected home device is either (a) a demand for money or other consideration based on a credible threat to damage, disable, deny access to or disseminate content from a Member's device, system or data, or (b) a demand based on an offer to restore access or functionality in connection with an attack on them. Cyber extortion response costs are payments made as directed in response to such an event, but only when they are incurred as a direct result of an extortion event directed against a Member and approved in advance by the insurer. The insurer may pay an unapproved payment if it determines that obtaining its approval was not practical and that it would have approved the payment if consulted at the time.
Supporting quotations
Cyber extortion event means one of the following involving a computing device or connected home device:
a. A demand for money or other consideration based on a credible threat to damage, disable, deny access to or disseminate content from a Member's device, system or data; or
b. A demand for money or other consideration based on an offer to restore access or functionality in connection with an attack on a Member's device, system or data.
Cyber extortion response costs means any payment made as directed in response to a cyber extortion event, but only when that payment is:
a. Incurred as a direct result of a cyber extortion event directed against a Member; and
b. Approved in advance by us. However, we may pay for cyber extortion response costs that were not approved in advance by us if we determine the following:
(1) It was not practical for the Member to obtain our prior approval; and
(2) If consulted at the time, we would have approved the payment.
but only to the extent that such corresponding coverages are included in the insured program
Qualifications & exceptions
The definition of stolen identity event counts a cyber extortion event only to the extent that matching coverage is included in the insured program; the Schedule card for this program lists Cyber Extortion as Not Included.
Charges & Financial Obligations · Company commitment
Data breach costs: forensic IT and legal review are paid on reasonable suspicion, even if no breach is found
Data breach costs include a forensic IT review, to determine the nature and extent of the breach and the number and identities of affected individuals, and a legal review of the breach and how the Member should respond. The forensic review does not cover costs to analyze vulnerabilities in systems, procedures or physical security, compliance with security standards, or loss of data that is not personally identifying or personally sensitive information. If there is reasonable cause to suspect a covered data breach event may have occurred, the insurer pays for the forensic IT review and the legal review even if it is later determined there was no covered breach, but once that is determined it pays no further costs.
Supporting quotations
Data breach costs means:
a. Forensic IT Review
Professional information technologies review if needed to determine, within the constraints of what is possible and reasonable, the nature and extent of the data breach event and the number and identities of the affected individuals.
This does not include costs to analyze, research or determine any of the following:
(1) Vulnerabilities in systems, procedures or physical security;
(2) Compliance with security standards; or
(3) The nature or extent of loss or damage to data that is not personally identifying information or personally sensitive information.
If there is reasonable cause to suspect that a covered data breach event may have occurred, we will pay for costs covered under Forensic IT Review, even if it is eventually determined that there was no covered data breach event. However, once it is determined that there was no covered data breach event, we will not pay for any further costs.
b. Legal Review Professional legal counsel review of the data breach event and how a Member should best respond to it.
If there is reasonable cause to suspect that a covered data breach event may have occurred, we will pay for costs covered under Legal Review, even if it is eventually determined that there was no covered data breach event. However, once it is determined that there was no covered data breach event, we will not pay for any further costs.
Qualifications & exceptions
The Schedule card for this program lists Data Breach as Not Included, and the definition of stolen identity event counts such an event only to the extent that matching coverage is included in the insured program.
Charges & Financial Obligations · Company commitment
Data breach costs include notifying affected individuals
Data breach costs also cover the Member's necessary and reasonable costs to notify affected individuals of the data breach event. That notification is also the condition for the separate services to affected individuals described in the next card.
Supporting quotations
c. Notification to Affected Individuals
The Member’s necessary and reasonable costs to provide notification of the data breach event to affected individuals.
Qualifications & exceptions
The Schedule card for this program lists Data Breach as Not Included, and the definition of stolen identity event counts such an event only to the extent that matching coverage is included in the insured program.
Charges & Financial Obligations · Company commitment
Services to affected individuals need prior notification; credit and identity services need personal-data breaches
Services to affected individuals are covered only if the Member has given the notification described above, and only for the Member's necessary and reasonable costs of providing them. For any data breach event the services are an informational materials packet of loss prevention and customer support information and a toll-free help line. For events involving personally identifying information, the further services are a credit report and an electronic credit-monitoring service (subject to the affected individual enrolling with the designated service provider) and identity restoration case management: an identity restoration professional who helps an affected individual who is or appears to be a victim of an identity theft event that may reasonably have arisen from the breach, as far as is possible and reasonable. An affected individual is a person whose information a covered data breach event has lost, stolen, released or published.
Supporting quotations
d. Services to Affected Individuals
This coverage only applies if the Member has provided notification of the data breach event to affected individuals as covered under paragraph c. above.
The Member’s necessary and reasonable costs to provide the following services to affected individuals.
(1) The following services apply to any data breach event:
(a) Informational Materials
A packet of loss prevention and customer support information.
(b) Help Line
A toll-free telephone line for affected individuals with questions about the data breach event. Where applicable, the line can also be used to request additional services as listed in (2) (a) and
(b) below.
(2) The following additional services apply to data breach events involving personally identifying information.
(a) Credit Report and Monitoring
A credit report and an electronic service automatically monitoring for activities affecting an individual’s credit records. This service is subject to the affected individual enrolling for this service with the designated service provider.
(b) Identity Restoration Case Management
With respect to any affected individual who is or appears to be a victim of identity theft event that may reasonably have arisen from the data breach event, the services of an identity restoration professional who will assist that affected individual through the process of correcting credit and other records and, within the constraints of what is possible and reasonable, restoring control over his or her personal identity.
Affected individual means any person whose personally identifying information or personally sensitive information is lost, stolen, accidentally released or accidentally published by a data breach event covered under the policy. This definition is subject to the following provisions:
Identity theft event means the fraudulent use of social security number or other personally identifying information. This includes fraudulently using such information to establish credit accounts, secure loans, enter into contracts or commit crimes.
Qualifications & exceptions
The Schedule card for this program lists Data Breach as Not Included, and the definition of stolen identity event counts such an event only to the extent that matching coverage is included in the insured program.
Credit monitoring is subject to the affected individual enrolling for it with the designated service provider.
Not stated here
The document does not name the designated service provider for credit monitoring.
Charges & Financial Obligations · Restriction or exception
Fraud costs are only the direct financial loss, and exclude indirect loss, interest and amounts a third party can repay
Fraud costs means the amount fraudulently taken from a Member, the direct financial loss only. They do not include other expenses arising from the fraud event; indirect loss such as bodily injury, lost time, lost wages, identity recovery expenses or damaged reputation; interest, time value or potential investment gain on the lost amount; or any portion that has been, or can reasonably be expected to be, reimbursed by a third party such as a financial institution.
Supporting quotations
Fraud costs means the amount fraudulently taken from a Member. This is the direct financial loss only. Fraud costs does not include any of the following:
a. Other expenses that arise from the fraud event;
b. Indirect loss, such as bodily injury, lost time, lost wages, identity recovery expenses or damaged reputation;
c. Any interest, time value or potential investment gain on the amount of financial loss; or
d. Any portion of such amount that has been or can reasonably be expected to be reimbursed by a third party, such as a financial institution.
Qualifications & exceptions
The Schedule card for this program lists Online Fraud Reimbursement as Not Included, and the definition of stolen identity event counts such an event only to the extent that matching coverage is included in the insured program.
Charges & Financial Obligations · Restriction or exception
A fraud event is a device-based fraud causing direct financial loss, of five listed kinds
A fraud event means one of five things, when it is wholly or partly carried out through a computing device or connected home device and causes direct financial loss to a Member: an identity theft event; unauthorized use of a card, card number or account number for a bank or credit account in the Member's name when the Member is legally liable for the use; forgery or alteration of a check or negotiable instrument; acceptance in good faith of counterfeit currency; or online scams. Where a fraud event results directly from a stolen identity event, the Online Fraud Reimbursement coverage pays the Member's necessary and reasonable fraud costs. Computing devices and connected home devices must be owned or leased and controlled by a Member.
Supporting quotations
Fraud event
a. Fraud event means any of the following, when such event is wholly or partially perpetrated through a computing device or connected home device and results in direct financial loss to a Member:
(1) A identity theft event;
(2) The unauthorized use of a card, card number or account number associated with a bank account or credit account issued to or registered in a Member's name, when the Member is legally liable for such use;
(3) The forgery or alteration of any check or negotiable instrument;
(4) Acceptance in good faith of counterfeit currency; or
(5) Online scams.
If there has been a fraud event that is wholly or partially perpetrated through a computing device or connected home device as a direct result of such stolen identity event, then we will pay the Member's necessary and reasonable fraud costs.
Computing device means a desktop, laptop or tablet computer or Wi-Fi router or other internet access point. Such device must be owned or leased by a Member, as well as operated under the Member's control.
Connected home device means any electronic device, other than a computing device, that connects to the internet or to other electronic devices. This includes, but is not limited to, networked versions of any of the following:
Identity theft event means the fraudulent use of social security number or other personally identifying information. This includes fraudulently using such information to establish credit accounts, secure loans, enter into contracts or commit crimes.
Online scams means intentional and criminal deception of a Member, perpetrated partially or wholly through a computing device or connected home device, to induce the Member to:
but only to the extent that such corresponding coverages are included in the insured program
Qualifications & exceptions
The Schedule card for this program lists Online Fraud Reimbursement as Not Included, and the definition of stolen identity event counts such an event only to the extent that matching coverage is included in the insured program.
Not stated here
The online scams definition is completed in the following block group and is carded with the definitions that follow.
Charges & Financial Obligations · Restriction or exception
Fraud events exclude coerced transfers, dealings with family or Members, authorized card use and listed business cases
A fraud event does not include an occurrence in which a Member is threatened or coerced to part with something of value (other than online scams); one between a Member and another Member, a current or former spouse, common law spouse or domestic partner, or a grandparent, parent, sibling, child or grandchild; one involving a bank or credit card, card number or account number used by a person who has ever received any authorization from a Member to use it, or where the Member has not complied with all terms and conditions under which it was issued; or one arising from the Member's business or professional service, a dispute over the completeness, authenticity or value of a product, service or financial instrument, a gift or charitable contribution, an online auction or auction site, a lottery, gambling or game of chance, or an advance fee fraud or other fraud where the Member provides money expecting a larger amount or greater value later.
Supporting quotations
b. Fraud event does not mean or include any occurrence:
(1) In which a Member is threatened or coerced to part with something of value, other than online scams;
(2) Between a Member and any of the following:
(a) Any other Member;
(b) A Member’s current or former spouse, common law spouse or domestic partner; or
(c) A Member’s grandparent, parent, sibling, child or grandchild.
(3) Involving use of a card, card number or account number associated with a bank account or credit account:
(a) By a person who has ever received any authorization from a Member to use such card, card number or account number; or
(b) If a Member has not complied with all terms and conditions under which such card, card number or account number was issued.
(4) Arising from any of the following:
(a) The business or professional service of a Member.
(b) A dispute or a disagreement over the completeness, authenticity or value of a product, a service or a financial instrument.
(c) A gift or charitable contribution to an individual or any legitimate organization.
(d) An online auction or the use of an online auction site.
(e) A lottery, gambling or a game of chance.
(f) An advance fee fraud or other fraud in which a Member provides money based on an expectation of receiving at some future time a larger amount of money or something with a greater value than the money provided.
Qualifications & exceptions
The Schedule card for this program lists Online Fraud Reimbursement as Not Included, and the definition of stolen identity event counts such an event only to the extent that matching coverage is included in the insured program.
Charges & Financial Obligations · Restriction or exception
Future loss avoidance pays for device improvements within 60 days and capped at 10% of the cyber attack payment
Future loss avoidance costs are amounts a Member spends to improve a computing device or connected home device, provided the costs are incurred within 60 days after discovering the cyber attack event and the insurer agrees in writing that the improvements would reasonably reduce the likelihood of a similar attack (it will not unreasonably withhold agreement). Improvements may include hardware and software upgrades; for services under lease, license or subscription only the first 12 months of cost are payable. The most paid for all such costs for one cyber attack event is 10% of the insurer's Eligible Payment to the Member before any future loss avoidance payment, where Eligible Payment is the insurer's total payment under cyber attack coverage excluding any deductible. Any payment for hardware replacement or upgrades described under the system restoration costs definition reduces the amount payable.
Supporting quotations
Future loss avoidance costs
a. Future loss avoidance costs means the amount spent by a Member to make improvements to a computing device or connected home device, provided:
(1) Such future loss avoidance costs are incurred within 60 days after the discovery of the cyber attack event; and
(2) We agree in writing that improvements to which future loss avoidance costs relate would reasonably reduce the likelihood of a future cyber attack event similar to the one for which the Member has received payment under coverage B.2.c. Cyber Attack. We will not unreasonably withhold such agreement.
b. The improvements described in paragraph a.(2) above may include, but are not limited to, hardware and software upgrades. Improvements involving services subject to lease, license or subscription may have costs that are ongoing. In such case, the most we will pay are costs associated with the first 12 months of any such service, subject to the amount described in paragraph c. below.
c. The most we will pay for all future loss avoidance costs with respect to any one cyber attack event is 10% of our Eligible Payment to the Member prior to any payment under this Future Loss Avoidance coverage.
d. As used in this definition, Eligible Payment means our total payment to the Member under coverage B.2.c. Cyber Attack, not including any deductible amount. Any payment made for hardware replacement or hardware upgrades as described under A. DEFINITIONS, 33. System restoration costs, item b.(1) below reduces the amount we will pay for future loss avoidance costs.
Cyber attack event means one of the following involving a computing device or connected home device:
Qualifications & exceptions
The Schedule card for this program lists Cyber Attack as Not Included, and the definition of stolen identity event counts such an event only to the extent that matching coverage is included in the insured program.
Not stated here
The text cites the system restoration costs definition by a number ("33.") that the extracted text does not show, so the exact item is identified here only by its name.
Charges & Financial Obligations · Restriction or exception
Home title fraud: attorney and recovery costs when an identity theft transfers real property title away from a Member
A home title fraud event is an identity theft event that results in a wrongful or fraudulent transfer of title to real property from a Member. Home title fraud costs are fees and expenses for an attorney approved by the insurer to recover title to real property wrongfully or fraudulently transferred from a Member, and any other reasonable costs necessarily incurred in recovering that title, including court filing and title recording fees.
Supporting quotations
Home title fraud costs means:
a. Fees and expenses for an attorney approved by us for the recovery of title to real property wrongfully or fraudulently transferred from a Member; and
b. Any other reasonable costs necessarily incurred by a Member in the course of recovering such title, including court filing and title recording fees.
Home title fraud event means an identity theft event resulting in the wrongful or fraudulent transfer of title to real property from a Member.
Identity theft event means the fraudulent use of social security number or other personally identifying information. This includes fraudulently using such information to establish credit accounts, secure loans, enter into contracts or commit crimes.
Qualifications & exceptions
The Schedule card for this program lists Home Title Fraud as Not Included, and the definition of stolen identity event counts such an event only to the extent that matching coverage is included in the insured program.
Charges & Financial Obligations · Company commitment
Identity theft costs: re-filing, postage, credit reports and attorney help for listed identity theft problems
Identity theft costs are the reasonable and necessary costs a Member incurs as a result of an identity theft event. Items a to d are: costs of re-filing loan, grant or other credit applications that were rejected solely because of an identity theft event; long distance phone calls, postage and notarizing documents; credit reports from established credit bureaus; and fees for an attorney approved by the insurer for defending a civil suit against the Member, removing a civil judgment wrongfully entered against the Member, legal help at a governmental audit or hearing, legal help challenging the accuracy of the Member's consumer credit report, or defending criminal charges brought against the Member because of a third party using the Member's identity. Costs must be reasonable and necessary, and legal fees are payable only for an attorney the insurer has approved. The exclusion of third party liability and legal defense costs carves out Identity Theft Recovery coverage.
Supporting quotations
Identity theft costs means the following when they are reasonable and necessary costs that are incurred by a Member as a result of a identity theft event:
a. Costs for re-filing applications for loans, grants or other credit instruments that are rejected solely as a result of a identity theft event;
b. Costs for long distance telephone calls, postage and notarizing documents;
c. Costs for credit reports from established credit bureaus;
d. Costs for an attorney approved by us for the following:
(1) The defense of any civil suit brought against a Member;
(2) The removal of any civil judgment wrongfully entered against a Member;
(3) Legal assistance for a Member at an audit or hearing by a governmental agency;
(4) Legal assistance in challenging the accuracy of a Member’s consumer credit report;
(5) The defense of any criminal charges brought against a Member arising from the actions of a third party using the personal identity of the Member; or
Any third party liability or legal defense costs, except as described in coverage B.2.b. Identity Theft Recovery.
Qualifications & exceptions
Legal costs are subject to a sublimit that is part of the Identity Theft Recovery limit, as read in the limits cards.
Not stated here
The document does not say how a Member asks for approval of an attorney or what happens if the insurer does not approve one.
Charges & Financial Obligations · Company commitment
Lost wages, dependent care and counseling are covered with documentation, timing and non-relative requirements
Identity theft costs also include: (e) lost wages or salary earnings for employer-documented time necessarily taken away from work for the activities in items a to d, to meet law enforcement, governmental agencies, credit agencies or individual creditors and businesses, or otherwise to recover control over the stolen identity, but not wages or salary for sick days, time taken away from self-employment, or time taken away for tasks that could reasonably have been done outside working hours; (f) costs of supervising children or elderly or infirm relatives or dependents of the Member while the Member is away from that supervision, provided the care comes from a professional care provider who is not a relative of the Member; and (g) costs for counseling from a licensed mental health professional who is a professional care provider and not a relative of the Member.
Supporting quotations
e. Lost wages or salaries earnings for employer-documented time necessarily taken away from work:
(1) For the activities described in a. through d. above;
(2) To meet with law enforcement authorities, governmental agencies, credit agencies or individual creditors and businesses; or
(3) To otherwise recover control over the stolen personal identity.
This does not include wages or salaried earnings for sick days, time taken away from self-employment or time taken away for tasks that could reasonably have been done during non-working hours.
f. Costs of supervision of children or elderly or infirm relatives or dependents of a Member during time taken away from such supervision. Such care must be provided by a professional care provider who is not a relative of the Member;
g. Costs for counseling from a licensed mental health professional. Such care must be provided by a professional care provider who is not a relative of the Member;
Qualifications & exceptions
The time and sublimit rules for items e, f and g are in the limits cards: item e and f share one sublimit and item g has its own, each part of the Identity Theft Recovery limit.
Charges & Financial Obligations · Restriction or exception
Other identity theft costs cover recovering control and some fees, but exclude stolen money and prevention costs
Item h covers any other reasonable costs the Member necessarily incurs as a direct result of the identity theft event. Such costs include costs the Member incurs to recover control over his or her personal identity, deductibles or service fees from financial institutions, and court filing and title recording fees. They do not include costs to avoid, prevent or detect an identity theft event or other loss; money lost or stolen; costs restricted or excluded elsewhere in the policy; or home title fraud costs. Because money lost or stolen is excluded, Identity Theft Recovery reimburses expenses of dealing with the theft, not the stolen amount itself.
Supporting quotations
h. Any other reasonable costs necessarily incurred by a Member as a direct result of the identity theft event.
(1) Such costs include:
(a) Costs by the Member to recover control over his or her personal identity.
(b) Deductibles or service fees from financial institutions.
(c) Court filing and title recording fees.
(2) Such costs do not include:
(a) Costs to avoid, prevent or detect a identity theft event or other loss.
(b) Money lost or stolen.
(c) Costs that are restricted or excluded elsewhere in the policy.
(d) Home title fraud costs.
Home title fraud costs means:
b. Any other reasonable costs necessarily incurred by a Member in the course of recovering such title, including court filing and title recording fees.
Qualifications & exceptions
Item h is the Miscellaneous Unnamed Costs line in the Schedule, which has its own sublimit read in the limits cards.
Not stated here
The list of included costs and the exclusion of home title fraud costs both mention court filing and title recording fees (home title fraud costs include "court filing and title recording fees" for recovering title); the document does not say which controls for those fees when the cause is a transfer of property title.
Charges & Financial Obligations · Restriction or exception
Utility bill overage expenses are extra cryptojacking utility costs shown on written utility invoices
Utility bill overage expenses are additional expenses a Member incurs to operate the home, over and above what would normally have been incurred in the same period if no cryptojacking event had occurred, provided the utility provider bills them by written invoices reflecting the additional use or consumption. They do not include expenses incurred before the policy period for which the policy applies, or charged at a flat or fixed fee that does not vary with usage. A utility provider means an electrical, internet, natural gas or oil service provider.
Supporting quotations
Utility bill overage expenses
a. Utility bill overage expenses means additional expenses incurred by a Member to operate their home over and above the cost that normally would have incurred to operate their home during the same period had no cryptojacking event occurred, provided that such additional expenses are billed to the Member by the Utility Provider via written invoices that reflect the additional utility usage or consumption.
b. Utility bill overage expenses does not mean or include any expenses that are:
(1) Incurred prior to the policy period for which the policy is applicable; or
(2) Charged at a flat or fixed fee that does not fluctuate with usage.
c. As used in this definition, Utility Provider means an electrical, internet, natural gas or oil service provider.
Cryptojacking event means a cyber attack event carried out for the purpose of mining cryptocurrency that causes a Member to incur utility bill overage expenses.
Qualifications & exceptions
The Schedule card for this program lists Cyber Attack as Not Included, and the definition of stolen identity event counts such an event only to the extent that matching coverage is included in the insured program.
Charges & Financial Obligations · Company commitment
If the requirements are met, the insurer provides a case manager and pays reasonable, necessary identity theft costs
When the coverage requirements have been met, the insurer provides the Member the listed coverages for loss directly arising from the stolen identity event. Case Management Service is the services of an identity recovery case manager as needed to respond to the stolen identity event. Identity Theft Recovery applies if there has been an identity theft event as a direct result of the stolen identity event, and then the insurer pays the Member's reasonable and necessary identity theft costs. For this program the Schedule lists exactly these two coverages as included.
Supporting quotations
COVERAGES PROVIDED
If all of the conditions listed above in 1. COVERAGE REQUIREMENTS have been met, then we will provide the Member the following coverages for loss directly arising from such stolen identity event.
a. Case Management Service
We will provide the services of an identity recovery case manager as needed to respond to the stolen identity event.
b. Identity Theft Recovery
If there has been an identity theft event as a direct result of such stolen identity event, then we will pay the Member's reasonable and necessary identity theft costs.
Identity recovery case manager means one or more individuals assigned by us to assist a Member with communications we deem necessary for re-establishing the integrity of the personal identity of the Member. This includes, with the permission and cooperation of the Member, written and telephone communications with law enforcement authorities, governmental agencies, credit agencies and individual creditors and businesses.
Identity theft costs means the following when they are reasonable and necessary costs that are incurred by a Member as a result of a identity theft event:
Identity theft event means the fraudulent use of social security number or other personally identifying information. This includes fraudulently using such information to establish credit accounts, secure loans, enter into contracts or commit crimes.
Qualifications & exceptions
The Schedule card for this program lists Case Management Service for 12 months and Identity Theft Recovery of $1,000,000.
Charges & Financial Obligations · Company commitment
Online fraud, cyberbullying, home title fraud and data breach coverage grants are described but Not Included here
The coverage text also describes four more coverages, each tied to an event that is a direct result of the stolen identity event: Online Fraud Reimbursement pays the Member's necessary and reasonable fraud costs for a fraud event carried out wholly or partly through a computing device or connected home device; Cyberbullying reimburses necessary and reasonable cyberbullying costs; Home Title Fraud pays reasonable and necessary home title fraud costs; and Data Breach pays reasonable and necessary data breach costs. The definition of stolen identity event counts these events only to the extent matching coverage is included in the insured program, and the Schedule card for this program lists all four as Not Included.
Supporting quotations
e. Online Fraud Reimbursement
If there has been a fraud event that is wholly or partially perpetrated through a computing device or connected home device as a direct result of such stolen identity event, then we will pay the Member's necessary and reasonable fraud costs.
f. Cyberbullying
If there has been a cyberbullying event as a direct result of such stolen identity event, then we will provide reimbursement for the Member's necessary and reasonable cyberbullying costs.
g. Home Title Fraud
If there has been a home title fraud event as a direct result of such stolen identity event, then we will pay the Member’s reasonable and necessary home title fraud costs.
h. Data Breach
If there has been a data breach event as a direct result of such stolen identity event, we will pay the Member’s reasonable and necessary data breach costs.
a. Fraud event means any of the following, when such event is wholly or partially perpetrated through a computing device or connected home device and results in direct financial loss to a Member:
Cyberbullying costs means the following costs arising as a direct result of a cyberbullying event when incurred by a Member within 12 months after the cyberbullying event:
Home title fraud costs means:
Data breach costs means:
but only to the extent that such corresponding coverages are included in the insured program
Charges & Financial Obligations · Restriction or exception
Member Annual Aggregate Limit and Coverage Aggregate Limit cap what is paid per Member in one policy period
The Member Annual Aggregate Limit shown in the Schedule is the most the insurer will pay for all loss, damage or expense for any one Member arising during one policy period for all coverages provided by the policy. The Coverage Aggregate Limit for each coverage shown in the Schedule is the most it will pay for one Member in one policy period for that coverage. If the insured program includes coverage for family members, each limit applies to all Members associated with any one primary member together. Each limit applies to the total of all loss from all stolen identity events discovered in that policy period. If an occurrence causes loss in more than one policy period, all of it is subject to the Member Annual Aggregate Limit of the first policy period in which the occurrence was discovered.
Supporting quotations
The Member Annual Aggregate Limit shown in the Schedule of this Summary of Benefits under the applicable insured program is the most we will pay for all loss, damage or expense for any one Member arising during any one policy period for all coverages provided by the policy. If the insured program includes coverage for family Members, then the Member Annual Aggregate Limit is the most we will pay for all loss, damage or expense for all Members associated with any one primary member for all coverages provided by the policy. This limit shall apply to the total of all loss, damage or expense arising from all stolen identity events discovered during such policy period.
The Coverage Aggregate Limit for each coverage shown in the Schedule of this Summary of Benefits under the applicable insured program is the most we will pay for all loss, damage or expense for any one Member arising during any one policy period for such coverage. If the insured program includes coverage for family members, then the Coverage Aggregate Limit is the most we will pay for all loss, damage or expense for all Members associated with any one primary member for such coverage. This limit shall apply to the total of all loss, damage or expense arising from all stolen identity events discovered during such policy period. If any occurrence causes loss, damage or expense in more than one policy period, all such loss, damage and expense will be subject to the Member Annual Aggregate Limit of the first policy period in which the occurrence was discovered.
Occurrence means all stolen identity events, cyber attack events, cyberbullying event, cyber extortion events, data breach events, fraud events, home title fraud events or identity theft events that:
b. Such stolen identity event is first discovered by the Member during the policy period for which the policy is applicable; and
Qualifications & exceptions
The Schedule card for this program shows a $1,000,000 Member Annual Aggregate Limit and a $1,000,000 Identity Theft Recovery limit.
Not stated here
The document does not give the policy period dates, so when a period starts and ends is not stated here.
Charges & Financial Obligations · Restriction or exception
Sublimits for legal, wage and care, counseling and miscellaneous costs sit inside the Identity Theft Recovery limit
Legal costs (item d of identity theft costs) are subject to the sublimit shown in the Schedule. Lost wages (item e) and child and elder care expenses (item f) share one joint sublimit. Mental health counseling (item g) and miscellaneous unnamed costs (item h) each have their own sublimit. Each sublimit is part of, and not in addition to, the Identity Theft Recovery limit. For wages and care, counseling, and miscellaneous costs, coverage is limited to wages lost or costs incurred within 12 months after the Member first discovers the stolen identity event. The legal costs sublimit text does not state a 12-month window.
Supporting quotations
The Legal Costs as provided under item d. of the definition of identity theft costs are subject to the sublimit shown in the Schedule of this Summary of Benefits. This sublimit is part of, and not in addition to, the Identity Theft Recovery Coverage Limit.
Item e. (Lost Wages) and item f. (Child and Elder Care Expenses) of the definition of identity theft costs are jointly subject to the sublimit shown in the Schedule of this Summary of Benefits. This sublimit is part of, and not in addition to, the Identity Theft Recovery Coverage Limit. Coverage is limited to wages lost and costs incurred within 12 months after the first discovery of the stolen identity event by the Member.
Item g. (Mental Health Counseling) of the definition of identity theft costs is subject to the sublimit shown in the Schedule of this Summary of Benefits. This sublimit is part of, and not in addition to, the Identity Theft Recovery Coverage Limit. Coverage is limited to costs incurred within 12 months after the first discovery of the stolen identity event by the Member.
Item h. (Miscellaneous Unnamed Costs) of the definition of identity theft costs is subject to the sublimit shown in the Schedule of this Summary of Benefits. This sublimit is part of, and not in addition to, the Identity Theft Recovery Coverage Limit. Coverage is limited to costs incurred within 12 months after the first discovery of the stolen identity event by the Member.
Identity theft costs means the following when they are reasonable and necessary costs that are incurred by a Member as a result of a identity theft event:
Qualifications & exceptions
The Schedule card for this program shows Legal Costs as Included, $5,000 for lost wages and child and elder care, $1,000 for mental health counseling and $1,000 for miscellaneous unnamed costs.
Not stated here
The Schedule shows Legal Costs as "Included" rather than a dollar figure, so the legal costs sublimit amount is not stated.
Charges & Financial Obligations · Restriction or exception
Online scam fraud costs have a sublimit inside the Online Fraud Reimbursement limit
Fraud costs resulting from item a.(5), online scams, in the definition of fraud event are subject to the sublimit shown in the Schedule. The sublimit is part of, and not in addition to, the Online Fraud Reimbursement Coverage Limit.
Supporting quotations
Fraud costs resulting from Item a.(5). (online scams) of the definition of fraud event is subject to the sublimit shown in the Schedule of this Summary of Benefits. This sublimit is part of, and not in addition to, the Online Fraud Reimbursement Coverage Limit.
Qualifications & exceptions
The Schedule card for this program lists Online Fraud Reimbursement and Online Scams as Not Included.
Charges & Financial Obligations · Restriction or exception
Case Management and Identity Theft Recovery have no deductible; other coverages pay only above a scheduled one
The insurer pays only the part of the total payable loss that exceeds the Member Deductible shown in the Schedule for the insured program, subject to the Schedule limits, and the Member is responsible for the applicable Member Deductible if one is shown. Case Management Service and Identity Theft Recovery coverages are not subject to a deductible. These are the two coverages the Schedule lists as included for this program.
Supporting quotations
We will pay only that part of the total payable loss that exceeds the Member Deductible shown in the Schedule of this Summary of Benefits under the applicable insured program, subject to the applicable limits shown in the Schedule of this Summary of Benefits.
The Member will be responsible for the applicable Member Deductible under the applicable insured program, if shown in the Schedule of this Summary of Benefits.
Case Management Service and Identity Theft Recovery coverages are not subject to a deductible.
Qualifications & exceptions
The Schedule card for this program shows no deductible row.
Charges & Financial Obligations · Restriction or exception
The policy pays only after other insurance, warranties and service contracts, including any cyber insurance you carry
The insurer is excess over any other insurance, including cyber insurance, product warranty, extended services agreement or contract. The policy is specifically excess of any cyber insurance policy the Member carries, in addition to any other insurance the Member carries that applies to a loss under the policy.
Supporting quotations
Other Insurance
We shall be excess over any other insurance (including, without limitation, cyber insurance), product warranty, extended services agreement or contract. The policy is specifically excess of any cyber insurance policy carried by the Member, in addition to any other insurance carried by the Member that applies to a loss under the policy.
Not stated here
The document does not say how the excess rule interacts with the Identity Theft Recovery limit or how the Member should coordinate claims.
Charges & Financial Obligations · Context
Premium terms are between the insurer and the provider; the document states no premium for Members
The premium shown in the policy Declarations is based on rates in effect when the policy was issued. Apart from documented, verifiable changes in insurance premium taxes or legal or regulatory requirements that require a rate change, the insurer will change rates only on the policy's renewal effective date. Premium is calculated under the reporting and rates in the Declarations, prorated by the Reporting Period shown there, and the insurer issues a premium invoice to the provider within ten business days of receiving that reporting.
Supporting quotations
Premium
a. The premium shown in the Declarations of the policy was computed based on rates in effect at the time the policy was issued. Other than documented and verifiable change in applicable insurance premium taxes or legal or regulatory requirements requiring a change in the rates, we will only modify rates on the renewal effective date of the policy.
b. Premium will be calculated in accordance with the reporting and the rates shown in the Declarations of the policy, prorated based on the Reporting Period shown in the Declarations of the policy. We will issue a premium invoice to the provider within ten (10) business days of receipt of such reporting.
Not stated here
The document does not say whether a Member pays any premium or how the cost of the program is passed on; the Declarations and Reporting Period are not supplied.