Report a Cybercrime Event

Assess if email has been compromised, change password and enable multi-factor authentication, if not already in place.

Reach out to internal IT provider with a summary of the event and request an evaluation of the situation.

To report a cybercrime event email a description of the circumstances to: cyberclaims@clia.ca.

For live counselling call the 24/7 Hotline: 1-833-383-1488.                                     

An email will be required for formal notice of claim or circumstance to the insurer.  A Breach Coach may be assigned to assist with next steps and recommend an IT provider.

 

Cyber Coverage Protection

Cyber insurance is part of the coverage provided to the Law Society’s members who are required to have the mandatory liability coverage.

The actual terms of the Cyber Coverage Policy, rather than this Summary, govern coverage.

 

Per claim limits, by area of coverage:

Network Security and Privacy Liability     $250,000

SECURITY LIABILITY

Covers damages and claims expenses associated with lawsuits alleging the unauthorized access to, degradation of, or disruption to the insured’s network, failure to prevent transmission of malicious code or viruses, and use of the insured’s network to perform a denial of service attack (DDOS).

PRIVACY LIABILITY

Covers damages and claims expenses associated with lawsuits alleging the unauthorized collection, disclosure, use, access, destruction, or modification of personal protected Information.

Data Recovery and Loss of Business Income     $100,000

DATA RECOVERY

Covers cost to restore the network and data to the point it was at before the event occurred.

LOSS OF BUSINESS INCOME

Covers loss of income as a result of a breach on the insured’s computer systems. This loss of income can be caused by decreased productivity, inability to deliver products or services, or inability to access data.

Event Management Expenses     $100,000

BREACH COACH SERVICES

Covers the costs of a breach coach to provide advice in responding to and assisting you in responding to a security or privacy breach, including determining your legal obligations to provide notice of a security breach, privacy breach or breach of privacy regulations.

NOTIFICATION COSTS

Covers costs associated with letting all those affected by the breach (including individuals, entities, and regulators) know that it has occurred, regardless of whether this notification is required by regulators or voluntary. This would include costs such as: mailing campaigns, credit monitoring, and call centres to handle questions.

FORENSIC INVESTIGATIVE COSTS

Covers costs associated with hiring a professional third party to determine where, when, and how the breach occurred; also, to ensure that no future problems occur as a result of that particular system issue.

CRISIS MANAGEMENT COSTS

Covers costs incurred in hiring a professional public relations team to help prevent reputational harm to your business.

Data Extortion     $100,000

Covers ransom costs when there is a demand for compensation to stop a cyber-attack, such as ransomware.

Bricking     $100,000

Covers costs to replace computer & network hardware rendered useless after a cyber related event.

 

Note: The maximum that will be paid in regard to any one cyber event is $250,000.  Coverage available under any area of coverage shall be reduced by, and may be completely exhausted by, payments made under any other area of coverage.

E.g.     If area of coverage 1, 2, and 3 are triggered, the maximum amount the insurer will pay is $250,000 (the limit available under coverage 1). However, if losses under coverage 2 and 3 are in excess of $100,000, they will be capped at $100,000 combined, and the remaining limit of $150,000 will be available for coverage 1, as it carries a higher limit.

All claims arising out of the same, related, or continuing acts, facts, or circumstances, without regard to the number of insureds, claims, or claimants shall be considered a single claim and only one Limit of Liability will apply.

Aggregate annual limit for all claims: $1,000,000

 

Retention/Deductible:

• Security and Privacy Liability     $5,000
• Data Recovery and Loss of Business Income     $5,000 / 12 hours
• Event Management Expenses     $5,000
• Data Extortion     $5,000
• Bricking     $5,000

Who is covered:

The Law Society and the Law Society members who were required to be insured by mandatory lawyers professional liability insurance at the time of Discovery and includes a Law Firm with which said Law Society member was practicing law at the time of discovery.

IMPORTANT: IT requirements for coverage to respond:

Good data, computer and network hygiene is critical for any business, the following minimum standards are  conditions of coverage:

1. Enable and enforce multi-factor authentication* for all remote network access for authorized users and third parties.
2. Engage in cyber awareness training on at least an annual basis.
3. Have email scanning enabled for malicious links and attachments.
4. Weekly backups of data, stored offsite, and tested at least annually.
5. Installation of critical patches, anti-virus software, and anti-spyware must be made within two weeks of release.
6. Installation and maintenance, and active monitoring within reasonable business practices, of firewalls and endpoint protection.