By
Does malpractice cover a data breach? Get a clear answer before you need it.
You want to know that the coverage behind your firm matches the responsibility you carry for your clients. Let's separate three questions: responding to a breach, defending a client claim, and recovering a payment sent to the wrong account.
The answer
Do not rely on malpractice insurance alone to handle a data breach. It may respond to certain client claims involving your professional services, but your own breach-response costs and stolen funds raise separate coverage questions. Review your malpractice, cyber, and any crime coverage together to understand what may apply. [1][2][3]
The $16,000 settlement behind this conversation
I have helped clients work through settlement-payment fraud. In one incident, a law office transferred a $16,000 settlement to the wrong account.
Before the transfer, I had recommended standalone cyber coverage to the client. The client was relying on a small cyber add-on. Only after the money moved did they learn that the add-on would not cover the lost funds.
The people behind the fraud knew detailed information about the client. They even knew the bank where the settlement was originally supposed to be sent. Whether AI played a role was not established. What stood out was how much they already knew.
A moment like that can leave anyone wishing they could turn back time and make the decision with what they know now. I want you to have that understanding while you still have choices.
I share this as an example of payment fraud, not as evidence of a data breach or a malpractice claim outcome. For your firm, let's look at what each policy would do if a client file were exposed, a payment were diverted, or a client held you responsible.
You deserve more than a policy name and a limit. You deserve to understand what you can rely on while there is still time to make an informed decision.
Dallas Downey, CLCS
One incident. Three coverage questions.
What happens if a client holds your firm responsible? Your lawyers professional liability policy, often called LPL, may respond to a covered claim involving your professional services. A claim alleging that you failed to protect client information can raise both malpractice and cyber questions. Exclusions and the way the policies work together matter. [1]
Who helps your firm investigate and recover? A cyber policy can provide coverage for incident response and related expenses. Let's identify the actual benefits: investigation, legal support, notification, system restoration, and interruption coverage. Then we can check who provides the help, which costs require approval, and what your firm pays itself. [2][7]
What happens to money sent to the wrong account? Review payment-fraud coverage separately. Cyber or crime wording may address certain transfers, but protection for client funds is not automatic. A client's claim against you and reimbursement of the missing money are different questions. [3][4]
My recommendation is to work through those questions with your actual policies. A standalone cyber policy still needs the right coverage, limits, and conditions. Its name alone does not establish whether a particular loss will be paid.
Give each part of an incident a clear answer
Keep the missing payment on its own line in the review. Help investigating a loss is not the same as coverage for the lost money.
Protecting client trust includes planning your response
Your clients trust you with information they may share with very few people. In Texas, Rule 1.05 addresses your duties concerning confidential client information. That is why the response plan deserves a place beside the insurance review. [5]
You will need legal guidance on what happened, whose information was affected, and which notices are required. The Texas Attorney General says a qualifying breach affecting at least 250 Texans must be reported to that office as soon as practicably possible and no later than 30 days after discovery. Individual notice duties are separate. Your counsel should determine the applicable triggers, deadlines, and exceptions. [6]
For your coverage review, ask who you would call, how to engage approved counsel and investigators, and which expenses need insurer consent. The goal is to have those arrangements clear before your team needs them.
Here is how we can review your coverage together
Bring what you have. You do not need to interpret the policy before we meet.
- Start with the full documents. Gather your malpractice policy, cyber policy or add-on, and any crime policy, including endorsements. A declarations page helps us start, but it is not the whole contract.
- Work through the three scenarios. A client file is exposed. Your systems become unavailable. A payment goes to the wrong account. Which wording addresses each event?
- Check payment fraud and whose money is involved. Read the definitions and exclusions, including treatment of client funds. The absence of one exact phrase is not enough to decide whether coverage exists.
- Compare the limits with your work. Review payment sizes, information held, operating costs, and the deductible or retention your firm would pay. Include relevant sublimits, which are smaller caps within a policy.
- Write down the next steps. Identify questions for the insurer, available coverage changes, and the response contacts and procedures your team needs.
You can make a better decision when you know what is covered, what still needs confirmation, and what risk you would be keeping.
Get clear on what protects your clients and your firm.
Review your malpractice, cyber, and any crime coverage with Dallas. Understand how the policies fit together and which questions still need answers.
Book My Coverage Clarity ReviewChoose a meeting time with Dallas Downey, CLCS.
Choose the next answer you need
Sources and coverage notes
The settlement example is an anonymized account of my client experience. It describes one incident and the small cyber add-on involved, not a coverage result for every policy. The public sources below support the general insurance and risk explanations, not the private case facts.
[1] Wisconsin Lawyers Mutual: How Cyber Liability Insurance and Legal Malpractice Insurance Work Together. Explains potential overlap between client negligence claims and cyber coverage. Its Wisconsin legal discussion is not used as Texas law.
[2] ALPS: Cyber Insurance for Lawyers. Describes law-firm cyber options and factors to consider when evaluating limits. Product examples do not establish coverage under your policy.
[3] ALPS: Commercial Crime Insurance for Attorneys. Explains why fraudulent transfers and protection for client funds require a review of the actual wording.
[4] ALPS: 3 Safety Measures Your Firm Should Implement to Avoid Wire Transfer Scams. Provides a policy-specific example of restrictions on losses involving client funds. Those restrictions are not a finding about the incident described here.
[5] Texas Center for Legal Ethics: Rule 1.05, Confidentiality of Information. Addresses Texas lawyers' duties concerning confidential client information.
[6] Texas Attorney General: Data Breach Reporting. Explains the Texas Attorney General reporting threshold, deadline, and submission process.
[7] HSB: Cyber Suite. Shows why services and available limits should be checked rather than inferred from a cyber product's label.
Insurance coverage depends on the policy wording, limits, exclusions, conditions, and facts of the claim. This article provides general education, not a coverage determination or legal advice. Your legal counsel should evaluate duties arising from an incident.
Frequently asked questions
Does my malpractice insurance cover a data breach?
It may respond to a covered client claim involving your professional services, including some claims arising from exposed information. That does not establish coverage for your own breach-response costs or stolen funds. Review your malpractice, cyber, and any crime policies together, including exclusions and endorsements.
What does a cyber policy actually pay for after a hack?
Depending on its terms, a cyber policy can help pay for investigation, breach counsel, notification, system recovery, interruption losses, and certain liability claims. Coverage for money sent under fraudulent instructions requires its own review. Check the applicable limits, deductibles, conditions, and approved response providers.
How much cyber coverage does a litigation firm need?
Start with your payment amounts, funds held for others, client information, and the cost of disrupted operations. Compare those exposures with the relevant limits and the loss your firm could afford to retain. Your largest payment is one input, not a complete formula for the entire policy.
Is my firm too small to be a target?
A small team can still send payments and hold sensitive client information. In the settlement-fraud incident described here, the payment was $16,000. Use the work your firm performs and the money it handles to guide your review rather than treating headcount as protection.
You do not have to wait for renewal to understand what you own. Bring your current policies and your questions. We can review the important terms together and identify what needs a closer look. My goal is to help you make your next coverage decision with a clearer understanding of what is at stake.
Know what you can rely on, so you can focus on your clients.
Work through your coverage with Dallas. Understand what may respond, where questions remain, and what to address next.
Book My Coverage Clarity ReviewChoose a meeting time with Dallas Downey, CLCS.
The review is free. The decision is yours.
