How to tender a cyber claim

Refer to the following for guidance reporting the incident to your carrier and responding to a security incident or data breach.

Immediate Response to Incident:

The following steps should be followed in the case of an actual or potential information security breach including: (a) all losses or disclosures of confidential or sensitive information; (b) all information security violations and problems; (c) all suspected information security problems, vulnerabilities, and incidents; or (d) any damage to or loss of company computer hardware, software, or information that has been entrusted to the organization’s care.

• Step 1. Contact Lawyers’ Mutual Insurance Company immediately
• Step 2. Be prepared to provide the following information:
  • Policy Number
  • Firm Name
  • Contact Name/ Phone Number / Email
  • Date of Incident
  • Date of Incident Discovered
  • Brief Description of Incident
  • If ransomware, provide an alternative email address for us to contact you.

• Step 3. Record critical facts regarding the incident (date and time when the incident was discovered, who discovered the incident, what occurred, what systems and information were potentially compromised).
• Step 4. Secure the scene to preserve evidence. Do not allow anyone to take any action on affected systems.

Important Tips:

• Promptly notify us to identify resources available under your policy (e.g. legal, forensics, crisis management, and response vendors) to save time and costs.
• Restrict communications and use caution when discussing the incident. Limit discussions to a need-to-know basis, with communications taking place over the phone or face-to-face rather than email. And, avoid using the term “breach” which can trigger legal obligations. Instead, call the event a “security incident” or simply what it is, i.e. “a lost laptop.”