Glossary

Third-party coverage

Insurance that pays defense costs and damages when an outsider, such as a customer, patient or regulator, makes a claim against the policyholder.

Also called: third-party liability coverage, third-party cyber coverage, liability coverage

Third-party coverage responds to claims made against you by someone outside the contract: a customer, patient, employee, vendor or regulator who says you harmed them. General liability, professional liability, D&O and the liability sections of a cyber policy are all third-party coverages. They pay defense costs and the settlements or judgments the policyholder becomes legally obligated to pay, up to the limit.

In cyber, it is the liability half of the policy. It typically includes network security and privacy liability for suits by people whose data was exposed, media liability, and regulatory defense, with fines and penalties paid only where the law lets an insurer pay them. first-party coverage is the other half and reimburses the policyholder's own costs: forensics, notification, ransom and lost income. One breach often triggers both.

The details that matter are the ones that govern defense: the duty to defend, whether defense costs erode the limit, and the trigger, which is usually a claims-made policy. Small businesses sometimes buy only first-party cover because they fear downtime, then learn a data breach also brings a lawsuit. The guide on first-party vs third-party cyber coverage compares the coverage parts line by line.

Last reviewed October 10, 2026

In the index now

Related terms

First-party coverage Insurance that pays the policyholder directly for its own losses, such as damaged property or breach response costs, rather than defending claims by others. Defense costs The attorney fees, expert fees and other expenses of fighting a claim, which some policies pay on top of the limit and others deduct from it. Duty to defend A liability insurer's obligation to pay for your defense of a lawsuit that could potentially fall within coverage, which is broader than its duty to pay. Errors and omissions (E&O) Insurance for claims that a professional or service business's mistakes, missed work or bad advice caused a client a financial loss. Indemnity The principle that insurance restores your financial position after a loss, no better and no worse; also a contract promise to make good another's loss.

Related guides

Active assailant insurance: what it covers and what standard policies miss Active assailant policies pay for crisis response, lost income and liability after an armed attack that standard property and liability forms may not reach. Bailee coverage: insuring customers' property in your care Bailee's customers coverage pays for customers' property held for service or repair. Legal liability vs direct forms, the processing exclusion, valuation, gaps. What happens when you file a cyber claim The cyber claim from first call to payment: hotline, breach coach, forensics, retention, the income-loss claim, and why many reported claims close unpaid. Common cyber insurance exclusions The cyber policy exclusions that matter most, from prior knowledge and war to infrastructure, contracts and web tracking, and the carve-backs that help. Cyber insurance: what it covers for a business What a cyber policy pays for after a breach, ransomware attack or email fraud, how limits and retentions work, and what the policy leaves out. Cyber insurance vs tech E&O: which policy pays when Cyber pays your breach and outage costs and data claims; tech E&O pays customers' losses when your product fails. Where they overlap and where gaps hide.

Related en español

Cómo presentar un reclamo de seguro para su negocio, paso a paso A quién avisar, qué le exige la póliza primero, qué documentos enviar y qué plazos debe cumplir la aseguradora una vez reportado el reclamo.