Cyber liability insurance for Miami professionals: ransomware, HIPAA, and client data

A stolen laptop with a client list, a phishing wire, a ransomware lock on the practice-management server — GL is bodily injury and property damage in the physical world. Cyber is the data event.

First-party: forensics, restoration, business interruption, sometimes extortion. Third-party: claims by clients, notification, defense. Health-adjacent shops should not put diagnoses in a website form; they still need cyber if they email PHI. HIPAA is a program. Cyber is a policy. Both can apply.

MFA on email, backups offline or immutable, who can wire money, EDR. “We use iCloud” is not an answer. A $1 million limit is a starting conversation, not a guess.

Revenue, record counts, whether you take cards or health data, and last year’s IT questionnaire if you have it. Start a business quote and say cyber. An advisor will not sell a $100,000 toy limit to a clinic.