File a claim

Cowbell:

To report Claims, please use the contact information below:

Phone Number: 833-MEET-MOO

Email: claims@cowbellcyber.ai

After a situation that results in, or may result in, a Loss covered under this Policy is Discovered, You must notify Cowbell in writing as soon as practicable, but not to exceed thirty (30) days from the date Discovered, and cooperate with Cowbell in the investigation and settlement of the Claim or Loss. Additionally:

Under Insuring Agreements 1 – Security Breach Expense, 2 – Extortion Threats, 3 – Replacement or Restoration of Electronic Data, and 4 – Business Income and Extra Expense, You must: i.
a. notify local law enforcement officials;
b. submit to examination under oath at Our request and give Cowbell a signed statement of Your answers; and,
c. give Cowbell a detailed, sworn proof of loss within one hundred twenty (120) days.

In addition, under Insuring Agreement 2 – Extortion Threats, You must:
a. determine that the Extortion Threat has actually occurred;
b. with respect to Ransomware, make every reasonable effort to access Your Electronic Data from backup, if any, and to remediate the cause of the Ransomware;
c. make every reasonable effort to immediately notify Cowbell before making any ransom payment based upon the Extortion Threat; and,
d. approve any ransom payment based upon the Extortion Threat.
‍

Under Insuring Agreement 6 – Security Breach Liability Including Payment Card Industry (PCI) Fines and Penalties, You must:
a. immediately record the specifics of the Claim and the date Discovered;
b. immediately send Cowbell copies of any demands, notices, summonses or legal papers received in connection with the Claims;
c. authorize Cowbell to obtain records and other information; and,
d. assist Cowbell, upon Cowbell’s request, in the enforcement of any right against any person or organization which may be liable to You because of a Loss to which this Policy may also apply.

You will not, except at your own cost, voluntarily make a payment, assume any obligation or incur any expense without our consent.

‍

Hiscox:

Notification of cyber claims and events:

Hiscox Cyber Claims

5 Concourse Parkway, Suite 2150

Atlanta GA, 30328

Fax: 678-731-9501

Email: cyberclaimsUSA@Hiscox.com

If you experience a cyber event, please also contact the Breach Coach® at 1-855-HISCO-BR

(1-855-447-2627). Provide your company name and any other companies/individuals involved.

‍

Notifying claims

You must give written notice to Hiscox of any claim, or any other matter covered under Section II. Coverage enhancements and sublimits, as soon as possible once such claim or other matter becomes known to an executive, but in any event, no later than 60 days after the end of the policy Period. All such notifications must be in writing and include a copy of the claim or other covered matter, and must be submitted to Hiscox via the designated email address or mailing address above.

‍

Notifying Hiscox of potential claims

You have the option of notifying Hiscox of potential claims that may lead to a covered claim against You. In order to do so, you must give written notice to Hiscox as soon as possible and within the policy period, and the notice must, to the greatest extent possible, identify the details of the potential claim, including identifying the potential claimant(s), the likely basis for liability, the likely demand for relief, and any additional information about the potential claim we may reasonably request. The benefit to you of notifying Hiscox of a potential claim is that if an actual claim arises from the same circumstances as the properly notified potential claim, then Hiscox will treat that claim as if it had first been made against you on the date you properly notified Hiscox of it as a potential claim even if that claim is first made against you after the policy period has expired. All potential claim notifications must be in writing and submitted to Hiscox via the designated email address or mailing address identified above.

‍

Notifying Hiscox of events: You must give written notice to Hiscox of any event as soon as possible once such event is first discovered by you, but in any event no later than: (i) the end of the policy period; or (ii) 30 days after the end of the policy period for an event first discovered by you in the last 30 days of the policy period. All such notifications must be in writing and include a description of the event, and must be submitted to u s via the designated email address or mailing address identified above.

In addition, you must also inform, or allow us to inform, the appropriate law enforcement authorities for any event requiring such notification.

‍

Wingman:

Send Notice of Claims To:

AXIS Insurance Claims Department

P.O. Box 4470

Alpharetta, GA 30023-4470

Email: USFNOL@axiscapital.com

Phone (Toll-Free): (866) 259-5435

Phone: (678) 746- 9000

Fax: (678) 746-9315

‍

Reporting of Claims and Events

It is a condition precedent to coverage under this policy that:

as soon as any Control Group Insured becomes aware of any Claim, the Insured must notify the Insurer in writing as soon as practicable, but in no event later than 30 days after the end of the Policy Period;
as soon as any Control Group Insured becomes aware of any Enterprise Security Event, the Insured must immediately notify the Insurer in writing, but in no event later than 30 days after the Enterprise Security Event occurs; and
as soon as any Control Group Insured becomes aware of any Extortion Threat, the Insured must immediately notify the Insurer in writing but in no event later than 30 days after the Extortion Threat first occurs. This notice must contain known details concerning the person or entity making the Extortion Threat, and all reasonably obtainable information concerning the time, place and other details of the Extortion Threat.

The Insured is relieved of its obligation to notify the insurer as set forth in paragraphs 1, 2 and 3 above, if and only for so long as a “legal prohibition” prevents such notification. As used in this paragraph, “legal prohibition” means the written, dated and signed opinion of a qualified attorney who is not an Insured under this policy, that there exists a statute, law, regulation or court order that would prohibit such notification. Such opinion must specify the circumstances under which notification would be permissible. Immediately upon cessation of such “legal prohibition” the Insured must provide the required notice.

‍

Reporting of Circumstances

Solely as respects Claims-Made Liability Coverages:
‍
If, during the Policy Period or within 30 days after the expiration of the Policy Period, an Insured gives the Insurer written notice of an act, error, omission, fact or circumstance, including an Enterprise Security Event or purported violation of a Privacy Regulation that occurred during the Policy Period and is reasonably likely to give rise to a Claim with full details of:

a. such an act, error, omission, fact or circumstance including any available information on persons or entities involved such act, error, omission, fact or circumstance;
‍
b. the nature and extent of the potential damages and the names of the potential claimants;

c. the manner in which the Insured first became aware of such an act, error, omission, fact or circumstance,

‍

then any such Claim subsequently arising out of such act, error, omission, fact or circumstance will be deemed to have been made during the policy period in which notice was given. In order for coverage to apply to any such Claim, the Insured must provide notice to the Insurer of such Claim as soon as practicable, but no later than 30 days after such Claim is first made against the Insured. No coverage will be provided for any Damages, Regulatory Loss, or Claim Expenses incurred prior to the time such Claim is made unless otherwise authorized in writing by the Insurer.

‍

Solely as respects Crisis Management and Fraud Prevention Expense Coverages: If, during the Policy Period, an Insured reports any act, error, omission, fact or circumstance under the preceding paragraph that gives rise to an Enterprise Security Event, then the Enterprise Security Event subsequently arising out of such fact, circumstance, act, error or omission will be deemed to have occurred during the Policy Period. In order for coverage to apply to any expenses arising out of such Enterprise Security Event, the Insured must provide notice to the Insurer of such Enterprise Security Event as soon as practicable, but no later than thirty (30) days after such Enterprise Security Event first occurs. No coverage will be provided for any Crisis Management Expense, Fraud Response Expense, Public Relations Expense, or Forensic and Legal Expense incurred prior to the time the Enterprise Security Event occurs, unless otherwise authorized in writing by the Insurer.

‍

File a Claim