Does a small landlord need cyber insurance?
Cyber insurance pays for costs after a data event, such as a breach of tenant records, ransomware or a fraud loss, which property and general liability policies often do not cover. A landlord who holds applications, IDs and bank access has real data exposure, so it is worth getting a quote and reading the exclusions. Coverage, limits and prices vary a great deal by insurer, so ask an agent and read the policy.
The gap in a standard landlord policy
A landlord's property policy pays for damage to buildings. A liability policy pays when someone is hurt or their property is damaged. Neither is built for a stolen database of tenant applications, a locked bookkeeping file or a wire sent to a fake account. Those losses are digital, and they are the ones cyber coverage is written for.
The NAIC's consumer guide on cyber insurance explains that first-party coverage protects a business's own data, including customer information, and can cover legal counsel to work out notification duties. Read the policy to see which of those parts are included.
What a cyber policy may include
- Breach response: legal advice, notices to affected tenants, credit monitoring and a forensic review.
- Ransomware and extortion costs, and restoring data.
- Business interruption when systems are down.
- Liability claims from people whose data was exposed.
- Sometimes funds transfer fraud, often with a lower limit or an exclusion.
Not every policy has every item. Social engineering and fake invoice fraud are the usual weak spots, so ask for that coverage in writing if it matters to you.
Questions to ask an agent
- What is the limit for each type of loss, and is there a sublimit for fraud?
- Does it cover records held by my software vendors?
- What controls does the insurer require, such as two-factor sign-in or backups?
- Is there a retroactive date or a waiting period?
- Can it be added to my existing business owner policy, or is it a separate policy?
Keep the policy number and the claim phone line somewhere you can reach if your computer is locked, such as a printed sheet or your phone. Most policies expect you to report an event quickly and to use the insurer's approved responders, so find out the process before you need it.
Insurers increasingly ask whether you use two-factor sign-in and tested backups, and may decline or price up if you do not. The steps cost little and lower your risk with or without a policy.
Controls that cut the odds first
The FTC's cybersecurity guidance for small businesses covers the basics: limit who can reach sensitive data, use multifactor authentication, keep software updated and back up important files. CISA calls multifactor authentication one of the most effective steps. These do not replace insurance, but they make a claim less likely and a quote easier.
Insurance does not remove your duty to follow breach notice laws. If tenant data is exposed, state rules may require a notice to tenants and sometimes to the attorney general. Our post on tenant data breaches explains the basics.
How to decide
Price is a fair thing to ask about early. Small business cyber policies vary widely in cost by limit, size and the controls you have in place, so get at least two quotes and compare what each excludes, not just the premium. A cheaper policy that excludes fraud or has a low sublimit for notification costs may leave the gap you hoped to close.
Count what you hold. A landlord with two units and little tenant data has less to lose than a self-manager of 80 units with scanned IDs. Get a quote, compare it to what a breach could cost you in notices, legal help and downtime, and then choose. The NAIC guide is a good checklist to bring to the agent.
DoorKeeping keeps data access by role, an audit log of changes and approvals for money, which are the controls insurers ask about. DoorKeeping never holds your money and gives no insurance or legal advice.
Sources
- NAIC, A Consumer's Guide to Cyber Insurance, read Oct 30, 2026
- FTC, Cybersecurity for Small Business, read Oct 30, 2026
- CISA, More than a Password (multifactor authentication), read Oct 30, 2026
Questions
- Does landlord insurance cover a data breach?
- Usually not. Property and liability policies are written for physical loss and injury. Ask your agent about a cyber endorsement or policy.
- Will cyber insurance pay if I send money to a scammer?
- Only if the policy includes funds transfer or social engineering fraud, often with a lower limit. Check before you rely on it.
- What controls do insurers expect?
- Commonly two-factor sign-in, tested backups and limited access to sensitive data.