Computing devices and connected home devices must be owned or leased and controlled by a Member
A computing device is a desktop, laptop or tablet computer, or a Wi-Fi router or other internet access point. A connected home device is any other electronic device that connects to the internet or other electronic devices, including networked smart phones, thermostats, entertainment systems, appliances, smoke, fire and home security monitoring systems, and cameras (the list is not exhaustive). For both, the device must be owned or leased by a Member and operated under the Member's control. These definitions feed the cyber attack, cyber extortion, online scam and fraud event definitions.
Supporting quotations
Computing device means a desktop, laptop or tablet computer or Wi-Fi router or other internet access point. Such device must be owned or leased by a Member, as well as operated under the Member's control.
Connected home device means any electronic device, other than a computing device, that connects to the internet or to other electronic devices. This includes, but is not limited to, networked versions of any of the following:
a. Smart phones;
b. Thermostats;
c. Entertainment systems;
d. Appliances;
e. Smoke, fire and home security monitoring systems; or
f. Cameras.
Such device must be owned or leased by a Member, as well as operated under the Member's control.
Qualifications & exceptions
The connected home device list is introduced by "includes, but is not limited to", so it is illustrative.
Security & Safeguards · Context
Cyber attack means unauthorized access or malware on a covered device; cryptojacking is one kind
A cyber attack event is one of two things involving a computing device or connected home device: (a) unauthorized access or use, meaning someone gains access to a Member's device or system without authorization or for unauthorized purposes, or (b) a malware attack, meaning damage to a Member's device, system or data from malicious code such as viruses, worms, Trojans, spyware and keyloggers. Malware damage does not include damage from shortcomings or mistakes in legitimate code, or from code installed during manufacturing. A cryptojacking event is a cyber attack carried out to mine cryptocurrency that causes the Member to incur utility bill overage expenses. The definition of stolen identity event counts a cyber attack event only to the extent that cyber attack coverage is included in the insured program.
Supporting quotations
Cyber attack event means one of the following involving a computing device or connected home device:
a. Unauthorized Access or Use – meaning the gaining of access to a Member's device or system by an unauthorized person or persons or by an authorized person or persons for unauthorized purposes.
b. Malware Attack – meaning damage to a Member's device, system or data arising from malicious code, including viruses, worms, Trojans, spyware and keyloggers. This does not mean damage from shortcomings or mistakes in legitimate electronic code or damage from code installed on the Member's computer system during the manufacturing process.
Cryptojacking event means a cyber attack event carried out for the purpose of mining cryptocurrency that causes a Member to incur utility bill overage expenses.
but only to the extent that such corresponding coverages are included in the insured program
Qualifications & exceptions
The Schedule card for this program lists Cyber Attack as Not Included.
Security & Safeguards · Restriction or exception
Cyberbullying costs are covered only for a qualifying event and when incurred within 12 months
A cyberbullying act is harassment, intimidation, defamation, invasion of privacy, threat of violence or a similar act personally targeted at a Member and carried out wholly or partly through social media platforms. Cyberbullying costs are the costs arising as a direct result of a cyberbullying event and incurred by a Member within 12 months after the event: counseling for the victim from a licensed mental health professional, temporary relocation, temporary private tutoring, enrollment expenses for relocation to a similar alternate school (not tuition), professional cybersecurity consultation, mobile apps, social monitoring software and web-based products used to prevent further occurrence, legal expenses including removal of related online content, and lost wages, childcare and eldercare. A cyberbullying event means two or more similar or related cyberbullying acts that caused harm significant enough for a Member to take specified steps; the steps are listed in the text that follows this part of the definitions.
Supporting quotations
Cyberbullying act means an act of harassment, intimidation, defamation, invasion of privacy, threat of violence or other similar act personally targeted towards a Member and perpetrated wholly or partially using social media platforms.
Cyberbullying costs means the following costs arising as a direct result of a cyberbullying event when incurred by a Member within 12 months after the cyberbullying event:
a. Costs for counseling from a licensed mental health professional for the victim of the cyberbullying event;
b. Temporary relocation expenses;
c. Temporary private tutoring;
d. Enrollment expenses incurred due to relocation to a similar, alternate school. This does not include tuition costs;
e. Professional cybersecurity consultation services;
f. The purchase of mobile applications, social monitoring software and web-based products when used to prevent further occurrence of cyberbullying events;
g. Legal expenses, including legal expenses for the removal of online content related to the cyberbullying event; and
h. Lost wages, childcare and eldercare expenses.
Cyberbullying event means two or more similar or related cyberbullying acts. Such cyberbullying event must have caused harm significant enough for a Member to:
but only to the extent that such corresponding coverages are included in the insured program
Qualifications & exceptions
The definition of stolen identity event counts a cyberbullying event only to the extent that matching coverage is included in the insured program; the Schedule card for this program lists Cyberbullying as Not Included.
Security & Safeguards · Restriction or exception
A cyberbullying event needs two or more related acts and serious harm; a medical exam may be required
A cyberbullying event means two or more similar or related cyberbullying acts that caused harm significant enough for a Member either to report the event to a school administrator or law enforcement, or to need treatment by a licensed medical or mental health practitioner who is not a member of the Member's immediate family. When treatment is the basis, the insurer may, at its discretion, require the Member to take an independent medical exam. For this coverage the event begins on the date of the first similar or related cyberbullying act. A cyberbullying act is harassment, intimidation, defamation, invasion of privacy, a threat of violence or a similar act personally targeted at a Member and carried out wholly or partly on social media; a school administrator is a principal, vice principal, headmaster or dean.
Supporting quotations
Cyberbullying event means two or more similar or related cyberbullying acts. Such cyberbullying event must have caused harm significant enough for a Member to:
a. Report such cyberbullying event to a school administrator or law enforcement; or
b. Require treatment by a licensed medical or mental health practitioner who is a not a Member of the Member's immediate family. At our discretion, when such treatment is required, we reserve the right to require the Member to submit to an independent medical exam.
For the purposes of this coverage, the cyberbullying event begins on the date of the first similar or related cyberbullying act.
Cyberbullying act means an act of harassment, intimidation, defamation, invasion of privacy, threat of violence or other similar act personally targeted towards a Member and perpetrated wholly or partially using social media platforms.
School administrator means a principal, vice principal, headmaster or dean.
Qualifications & exceptions
The Schedule card for this program lists Cyberbullying as Not Included, and the definition of stolen identity event counts such an event only to the extent that matching coverage is included in the insured program.
Security & Safeguards · Restriction or exception
Data recovery costs cover a firm replacing lost or corrupted data, not irreplaceable or obsolete items
Data recovery costs are the costs of a professional firm hired by a Member to replace electronic data that has been lost or corrupted. They do not include costs to research, re-create or replace software programs or operating systems that are not commercially available, data that cannot reasonably be replaced (including personal photos, movies or recordings for which no electronic back-up is available), or data that is obsolete, unnecessary or no longer of use.
Supporting quotations
Data recovery costs
a. Data recovery costs means the costs of a professional firm hired by a Member to replace electronic data that has been lost or corrupted.
b. Data recovery costs does not mean costs to research, re-create or replace any of the following:
(1) Software programs or operating systems that are not commercially available.
(2) Data that cannot reasonably be replaced. This includes, but is not limited to, personal photos, movies or recordings for which no electronic back-up is available.
(3) Data that is obsolete, unnecessary or no longer of use.
Qualifications & exceptions
The cyber attack coverage that pays data recovery costs is listed as Not Included in the Schedule card for this program.
Security & Safeguards · Context
Identity theft event means fraudulent use of a Social Security number or other identifying information
An identity theft event is the fraudulent use of a social security number or other personally identifying information. The definition includes fraudulently using such information to establish credit accounts, secure loans, enter into contracts or commit crimes.
Supporting quotations
Identity theft event means the fraudulent use of social security number or other personally identifying information. This includes fraudulently using such information to establish credit accounts, secure loans, enter into contracts or commit crimes.
Security & Safeguards · Context
Online scams means deception that induces a Member to give up credentials or voluntarily part with money or property
Online scams means intentional and criminal deception of a Member, carried out partly or wholly through a computing device or connected home device, to induce the Member either to disclose login credentials, resulting in a financial loss of money, securities, cryptocurrency or tangible property, or to part voluntarily with money, securities, cryptocurrency or tangible property.
Supporting quotations
Online scams means intentional and criminal deception of a Member, perpetrated partially or wholly through a computing device or connected home device, to induce the Member to:
a. Disclose login credentials that results in a financial loss of money, securities, cryptocurrency or tangible property; or
b. Part voluntarily with money, securities, cryptocurrency or tangible property.
Computing device means a desktop, laptop or tablet computer or Wi-Fi router or other internet access point. Such device must be owned or leased by a Member, as well as operated under the Member's control.
Connected home device means any electronic device, other than a computing device, that connects to the internet or to other electronic devices. This includes, but is not limited to, networked versions of any of the following:
Qualifications & exceptions
The Schedule card for this program lists Online Scams as Not Included.
Security & Safeguards · Restriction or exception
System restoration costs cover a professional firm restoring a device, not hardware, upgrades or the Member's own time
System restoration costs are the costs of a professional firm hired by a Member to restore the Member's computing device or connected home device to the functionality it had before the cyber attack event by replacing or reinstalling software programs, removing malicious code, and configuring or correcting the configuration of the device or system. They do not include costs to repair or replace hardware (although the insurer may choose to pay for hardware repair or replacement if that reduces the amount of loss payable), costs to increase the speed, capacity or utility of the device or system, the Member's time or labor, or costs in excess of the replacement value of the Member's system, including applicable hardware and software.
Supporting quotations
System restoration costs
a. System restoration costs means the costs of a professional firm hired by a Member to do the following in order to restore the Member's computing device or connected home device to the level of functionality it had before the cyber attack event:
(1) Replace or reinstall computer software programs;
(2) Remove any malicious code; and
(3) Configure or correct the configuration of the Member's device or system.
b. System restoration costs does not mean any of the following:
(1) Costs to repair or replace hardware. However, we may choose to pay to repair or replace hardware if doing so reduces the amount of loss payable under the policy.
(2) Costs to increase the speed, capacity or utility of the Member's device or system.
(3) The Member's time or labor.
(4) Any costs in excess of the replacement value of the Member's system, including applicable hardware and software.
Qualifications & exceptions
The Schedule card for this program lists Cyber Attack as Not Included, and the definition of stolen identity event counts such an event only to the extent that matching coverage is included in the insured program.
Security & Safeguards · Company commitment
Cyber attack coverage would pay data recovery, system restoration, cryptojacking and future loss avoidance costs
If a cyber attack event occurs as a direct result of the stolen identity event, the Cyber Attack coverage would provide the Member four coverages for loss directly arising from that attack: data recovery, paying the Member's necessary and reasonable data recovery costs; system restoration, paying necessary and reasonable system restoration costs; cryptojacking, paying necessary and reasonable utility bill overage expenses; and future loss avoidance, paying necessary and reasonable future loss avoidance costs.
Supporting quotations
c. Cyber Attack
If there has been a cyber attack event as a direct result of such stolen identity event, then we will provide the Member the following coverages for loss directly arising from such cyber attack event:
(1) Data Recovery
We will pay the Member's necessary and reasonable data recovery costs.
(2) System Restoration
We will pay the Member's necessary and reasonable system restoration costs.
(3) Cryptojacking
We will pay the Member's necessary and reasonable utility bill overage expenses.
(4) Future Loss Avoidance
We will pay the Member's necessary and reasonable future loss avoidance costs.
Cryptojacking event means a cyber attack event carried out for the purpose of mining cryptocurrency that causes a Member to incur utility bill overage expenses.
Cyber attack event means one of the following involving a computing device or connected home device:
Qualifications & exceptions
The Schedule card for this program lists Cyber Attack as Not Included, and the definition of stolen identity event counts such an event only to the extent that matching coverage is included in the insured program.
Security & Safeguards · Company commitment
Cyber extortion coverage would provide expert advice and reimbursement of response costs
If a cyber extortion event occurs as a direct result of the stolen identity event, the Cyber Extortion coverage would provide the Member two things for loss directly arising from the extortion event: professional assistance from a subject matter expert provided by the insurer for advice and consultation on how best to respond to the threat, and reimbursement of the Member's necessary and reasonable cyber extortion response costs.
Supporting quotations
d. Cyber Extortion
If there has been a cyber extortion event as a direct result of such stolen identity event, then we will provide the Member the following coverages for loss directly arising from such cyber extortion event:
(1) Professional assistance from a subject matter expert provided by us for advice and consultation regarding how best to respond to the threat.
(2) Reimbursement of the Member's necessary and reasonable cyber extortion response costs.
Cyber extortion event means one of the following involving a computing device or connected home device:
Cyber extortion response costs means any payment made as directed in response to a cyber extortion event, but only when that payment is:
Qualifications & exceptions
The Schedule card for this program lists Cyber Extortion as Not Included, and the definition of stolen identity event counts such an event only to the extent that matching coverage is included in the insured program.
Security & Safeguards · Restriction or exception
Members must use due diligence to prevent and mitigate covered costs, including security and backups
Members must agree to use due diligence to prevent and mitigate costs covered under the policy. This includes, but is not limited to, complying with reasonable and widely practiced steps for providing and maintaining appropriate system and data security and for maintaining and updating, at appropriate intervals, backups of electronic data.
Supporting quotations
Due Diligence
Members must agree to use due diligence to prevent and mitigate costs covered under the policy. This includes, but is not limited to, complying with reasonable and widely-practiced steps for:
a. Providing and maintaining appropriate system and data security; and
b. Maintaining and updating at appropriate intervals backups of electronic data.
Not stated here
The document does not say what consequence follows if a Member does not use due diligence, or define "reasonable and widely practiced" steps.