July 01, 2024

Spotlight on Cyber Insurance

Cyber Insurance: What It Is, How It Works and Why You Need It

Every 40 seconds, a cyberattack occurs somewhere in the world. In the average time it takes to read this article, 10 to 15 attacks will have happened on global networks and servers. That equates to 2,220 global attacks per day, according to Security Magazine1. That’s more than 800,000 a year.

Not only is the frequency of attacks on the rise, so is the cost. IBM estimated the average global cost of a data breach to be $4.45 million2. That marked a 15% increase over three years.

The damage adds up quickly. Victims of cyberattacks incur many of the following expenses:

  • Infrastructure damage;
  • Incident communication to clients, employees and stakeholders;
  • Identity restoration for impacted parties;
  • Network interruption;
  • Lost revenue;
  • Inability to fulfill contracts;
  • Security enhancements;
  • Litigation costs and attorney fees;
  • Regulatory penalties;
  • Loss of intellectual property and clients;
  • Ransom payments to hackers.

Big or Small, Hackers Attack All

The IBM report also noted the financial sector ranked second in sustaining damage from attacks. Only health care suffered more. Accounting Today reported a 300% increase in cyberattacks on accounting firms3 since the start of the COVID-19 pandemic in 2020.

Hackers target accounting firms of all sizes. The following incidents have occurred.

Last year, three of the Big Four accounting firms were among 500 targets of a global ransomware attack4In November 2022, a Minnesota accounting firm with 270 employees suffered a breach5 that compromised Social Security numbers and other sensitive data. Last year, Accounting Today6 reported a malware attack on a small CPA firm in Georgia. An employee clicked a malicious link, encrypting the firm’s data. They paid a $450,000 ransom to recover their files.

Most small and medium-sized businesses could only survive for a week7 if they suffered a severe cyberattack. Accounting firms no longer have to assume all of the risk.

How Cyber Insurance Works

Cyber insurance, also known as cyber risk or cyber liability insurance, is a fairly new type of standalone policy covering losses from cyberattacks, including breaches or losses of confidential information.

Firms can recover some or all costs from a cyberattack, depending on the policy terms. This insurance requires regular premium payments, and firms can file a claim with the insurer if their network or digital assets are attacked.

A typical cyber insurance policy provides coverage in the following four key areas.

Incident Response covers the costs of dealing with a cyber incident, including forensic investigations, data recovery, legal advice, notification expenses, and public relations efforts.

Business Interruption aids businesses in recovering financial losses from cyber incidents that disrupt normal operations, such as ransomware attacks that shut down critical systems or data breaches causing downtime.

Cybercrime coverage protects businesses from financial losses due to cybercrimes, including social engineering scams, fraudulent wire transfers, funds transfer fraud, and extortion.

Privacy Liability helps businesses cover costs related to legal fees, settlements and damages resulting from data breaches or other privacy incidents that expose sensitive customer or employee information.

Standalone vs. Endorsements

Cyber coverage is often added as a rider to business or property insurance policies. However, these endorsements don’t offer the extensive protection and higher coverage limits of standalone cyber policies. A dedicated cyber insurance policy provides broader coverage for the risks CPAs face, including both first-party and third-party attacks.

First-party and Third-party Coverage

First-party attacks target an accounting firm’s network directly, while third-party attacks occur through another party, such as a client or vendor.

Cybercriminals are not unlike a run-of-the-mill burglar, who continuously searches for weak entry points. In the cyberworld where everything is connected by a network of wires, servers and clouds, a firm’s most vulnerable point is often a third party’s network.

Third-party coverage is crucial for CPAs, as hackers can use breached firm data to target clients, causing financial harm. This coverage helps with attorney costs to defend the firm, crisis management and public relations, settlement costs, court-ordered damages if the firm is found liable, regulatory inquiry responses, and government fines and penalties.

How Coverage is Underwritten

The higher the risk to the insurer, the higher the cost. Cyber insurance carriers evaluate risk based on the following factors.

Industry. High-risk industries like health care, legal and financial services are prime targets due to the sensitive data they store.

Company size. Larger companies have more network entry points.

Annual revenue. Higher revenue makes a company a bigger target for cybercriminals, especially for ransomware attacks. Revenue also indicates the potential financial impact of a breach.

Strength of security measures. Cyber insurance companies assess a company’s security measures, including:

  • Enforcement of MFA, encryption, patch management, backups, email filtering, and endpoint protection;
  • Secondary communication methods for validating fund transfers;
  • Document retention and disposal policies;
  • Access controls and password requirements;
  • Security testing procedures;
  • Effectiveness of employee cybersecurity training programs.

The Benefits of Buying Group Coverage

Due to rising risks and claims, cyber insurance premiums have surged. Purchasing coverage through a professional association like TXCPA can benefit members in a number of ways:

  • Competitive pricing;
  • Expert advice;
  • Access to multiple carriers, including A+ rated insurers;
  • Free, personalized risk assessments.

Click here to learn more about the TXCPA-endorsed cyber liability insurance plan.

A Vital Tool

Cyber insurance is a vital tool for accounting firms to protect themselves from the potential financial and reputational impacts of cyberattacks. Accounting firms should evaluate their cyber risk exposure, compare different cyber options and select the policy that best suits their needs and budget. By doing so, firms can enhance their cyber resilience, confidence and competitiveness in the digital age.

Why choose the TXCPA Member Insurance Program?

  • Coverage designed for professionals and their families.
  • Exclusive member rates from top-rated carriers.
  • Your participation supports the mission of the Texas Society of CPAs.
  • Learn more at txcpainsure.org or call us at 800-428-0272.

Protect What Matters Most with TXCPA Member Insurance

Safeguard your family, property and career with TXCPA Member Insurance. Our association-endorsed insurance offers value and reliability you can trust.

Footnotes

1. Fox, Jacob. “Top Cybersecurity Statistics for 2024.” Cobalt, Dec. 8, 2023. www.cobalt.io/blog/cybersecurity-statistics-2024

2. Cost of a Data Breach Report 2023. IBM, Overview Page. Referenced on May 9, 2024. www.ibm.com/reports/data-breach

3. Salman, Gary. “The rise of cybercrime in the accounting profession continues.” Accounting Today, Aug. 24, 2020. The rise of cybercrime in the accounting profession continues

4. Schappert, Stefanie. “Deloitte joins fellow Big Four MOVEit victims PWC, EY.” Cybernews, Nov. 15, 2023. https://cybernews.com/security/deloitte-big-four-moveit-pwc-ey-clop/

5. Phillips Erb, Kelly. “Big Four Accounting Firm Deloitte Confirms Cyber Attack. Forbes, Sept. 26, 2017.

6. Kelly, Sav. “Brady Martz & Associates faces four class-action complaints for 2022 data breach.” Grand Forks Herald, accessed from Yahoo!, Sept. 23, 2023.

7. Gaetano, Chris. “Cybersecurity for CPAs: One expensive click.” Accounting Today, April 12, 2023. www.accountingtoday.com/list/cybersecurity-for-cpas-one-expensive-click

 

Thanks to the Sponsors of Today's CPA Magazine

This content was made possible by the sponsors of this issue of Today's CPA Magazine:

 
Accounting Biz Brokers Accounting Practice Sales CPA Charge Goodman Financial PAS.Professional Accounting Sales Poe Group Advisors

 

  • Building the CPA Pipeline: A Faculty Perspective

    The CPA profession faces a shrinking pipeline, with fewer candidates entering the field even as demand grows. Faculty research highlights strategies to boost Exam success to better equip students, especially first-generation and future candidates under Texas’ new additional licensure pathway. Strengthening these supports is key to preparing the next generation of CPAs and securing the profession’s future.
    View Article
  • CPE: Joint Ventures and Equity Method Accounting

    Joint ventures enable organizations to combine resources under shared control to achieve strategic objectives, yet their accounting treatment has often posed challenges. To address this, FASB issued ASU 2023-05. This article examines the new guidance and its implications for equity method accounting.
    View Article
  • From Pipeline to Mobility: TXCPA Champions Two Major Wins for the Accounting Profession

    TXCPA achieved two landmark victories at the 89th Texas Legislature: an additional CPA licensure pathway for candidates and a modernized mobility law that strengthens practice standards in Texas. These wins not only expand opportunities for future CPAs but also set a precedent for other states, reinforcing TXCPA’s role as a leading advocate for the profession’s future.
    View Article
  • Finding Community and Purpose: Mariella Bosquez’s Journey in Accounting and TXCPA Houston

    Mariella Bosquez’s path to accounting was anything but traditional, but through TXCPA Houston she found both community and purpose. From psychology major to active student leader, her story shows how diverse backgrounds, mentorship and involvement can open doors and inspire the next generation of CPAs.
    View Article
  • Saved by the Byrd Rule: PCAOB Survives the One Big, Beautiful Bill

    Lawmakers looked to eliminate the Public Company Accounting Oversight Board (PCAOB) by folding its duties into the SEC, but the effort was blocked under Senate budget rules. Supporters argued the move would save money, while critics warned it would weaken audit oversight and investor protection. For now, PCAOB remains intact.
    View Article
  • TXCPA’s 2024-2025 Outstanding Chapter Awards Recognize Leadership, Service and Impact

    TXCPA’s Outstanding Chapter Awards celebrate small and medium-sized chapters that go above and beyond in leadership, service and community impact. This year, the San Angelo, East Texas and Rio Grande Valley chapters were recognized. Together, their achievements highlight the dedication and creativity shaping the profession.
    View Article
  • Your Old Plan vs. a Better Plan: How Accounting Firms Can Attract More CAS Clients

    Many firms still rely on outdated, exhausting methods like cold calls, referrals and random networking to win CAS clients - but those days are over. By embracing SEO, accounting firms can attract a steady stream of qualified, high-value clients who are already searching for their services, resulting in more revenue, stronger client relationships and the freedom to focus on delivering value.
    View Article
  • What’s Happening Around Texas - September-October 2025

    From networking luncheons and campus connections to hospital tours and a gathering at the Rusty Axe Brewing Co., members in Brazos Valley, Dallas, East Texas, and El Paso came together in a variety of ways. Professionals and students are finding community, inspiration, camaraderie, and fresh opportunities while chapters are setting bold visions for growth.
    View Article
  • Celebrating Our 2025-2026 TXCPA Faculty and Student Ambassadors!

    Through our Ambassador Program, TXCPA works with Texas educators and students each year to share resources and engage the next generation of CPAs, building connections on campuses across the state. TXCPA Ambassadors help us strengthen our presence and learn more about what we can do to help build and support the CPA pipeline.
    View Article
  • Stronger Together: Empowering the Next Generation

    The September/October issue of TXCPA’s magazine shines a spotlight on building the CPA pipeline and supporting future professionals. The issue is packed with ways to grow and stay connected. Most importantly, it’s a reminder that the future of our profession is built together - with your passion, time and voice.
    View Article
  • TXCPA Pipeline Resources at a Glance

    TXCPA’s Pipeline Resources offer something for everyone in the accounting pipeline — students, candidates, educators, and employers. Whether you’re exploring the field, teaching it or hiring talent, TXCPA connects you to the tools, people and opportunities that make an impact.
    View Article
  • The Statement of GreenHouse Gas Emissions

    Global standards for climate disclosure are rapidly evolving and companies are under pressure to measure and report indirect emissions across their value chains. A proposed Statement of GreenHouse Gas Emissions could give investors and stakeholders clearer, more comparable insights into corporate sustainability performance.
    View Article
  • 110 Years Strong: TXCPA Returns to Its Roots at the Tremont House

    TXCPA marked its 110th anniversary by returning to the historic Tremont House, celebrating a legacy of leadership while setting bold goals for the future. From legislative victories and a new tiered membership model to expanded student outreach and the launch of AcctoFi, the organization is driving transformation across advocacy, education and member engagement.
    View Article
  • Take Note

    In this edition of Take Note: Insurance Benefits Tailored for TXCPA Members; Enhancing Your Social Wellness; Stand Out as a Leader with the CGMA® Designation; TXCPA’s Career Center; Your Next Learning Opportunity
    View Article
  • Classifieds

    The classified ad section features listings for practice sales, firm buyers and specialized services. Whether you're expanding, selling or exploring niche opportunities, these ads connect you to valuable prospects and resources.
    View Article

CHAIR
Mohan Kuruvilla, Ph.D., CPA

PRESIDENT/CEO
Jodi Ann Ray, CAE, CCE, IOM

CHIEF OPERATING OFFICER
Melinda Bentley, CAE

EDITORIAL BOARD CHAIR
Jennifer Johnson, CPA

MANAGER, MARKETING AND COMMUNICATIONS
Peggy Foley
pfoley@tx.cpa

MANAGING EDITOR
DeLynn Deakins
ddeakins@tx.cpa

COLUMN EDITOR
Don Carpenter, MSAcc/CPA

DIGITAL MARKETING SPECIALIST
Wayne Hardin, CDMP, PCM®

CLASSIFIEDS
DeLynn Deakins

Texas Society of CPAs
14131 Midway Rd., Suite 850
Addison, TX 75001
972-687-8550
ddeakins@tx.cpa

 

Editorial Board
Derrick Bonyuet-Lee, CPA-Austin;
Aaron Borden, CPA-Dallas;
Don Carpenter, CPA-Central Texas;
Rhonda Fronk, CPA-Houston;
Aaron Harris, CPA-Dallas;
Baria Jaroudi, CPA-Houston;
Elle Kathryn Johnson, CPA-Houston;
Jennifer Johnson, CPA-Dallas;
Lucas LaChance, CPA-Dallas, CIA;
Nicholas Larson, CPA-Fort Worth;
Anne-Marie Lelkes, CPA-Corpus Christi;
Bryan Morgan, Jr, CPA-Austin;
Stephanie Morgan, CPA-East Texas;
Kamala Raghavan, CPA-Houston;
Amber Louise Rourke, CPA-Brazos Valley;
Shilpa Boggram Sathyamurthy, CPA-Houston, CA
Nikki Lee Shoemaker, CPA-East Texas, CGMA;
Natasha Winn, CPA-Houston.

CONTRIBUTORS
Melinda Bentley; Kenneth Besserman; Kristie Estrada; Holly McCauley; Craig Nauta; Kari Owen; John Ross; Lani Shepherd; April Twaddle; Patty Wyatt