How Much Does Cyber Insurance Cost in India?

Cyber insurance covers financial losses caused by online attacks. This includes fraud, data breaches, ransomware and identity theft. Anyone with a bank account or a business holding customer data carries some version of this risk.

Individual policies are built for personal use and priced accordingly. Business policies are priced differently, based on turnover, industry and data sensitivity. No single number applies to everyone.

A small personal policy can cost a few hundred rupees a year. A business policy covering a crore in exposure can run into six figures. This guide breaks down exactly how much does cyber insurance cost in India.

What Is Cyber Insurance?

Cyber insurance helps cover losses from an online attack. That could be money stolen through fraud, the cost of restoring a hacked system, or legal fees after a data breach.

Two versions of it exist in India. Individual cyber insurance deals with personal risk:

• A compromised email account
• Unauthorised card use
• Identity theft

Business cyber insurance covers organisational risk:

• A leak of customer records
• Downtime after ransomware
• Liability claims from affected customers

People often assume their bank’s fraud alerts or a decent antivirus already cover this ground. They don’t, not really. A fraud alert flags a suspicious transaction, but it doesn’t reimburse you, and it definitely doesn’t cover a lawsuit if a data breach on your end affects someone else.

How Much Does Cyber Insurance Cost in India?

Cyber insurance cost in India depends largely on whether you’re buying it for personal use or for a business, since the two are priced on entirely different scales.

Premiums for Individual Cyber Policies

Say you’re a freelance designer who does most of your billing through UPI and keeps client files on cloud storage. For someone in that position, a basic individual cyber policy starts remarkably cheap, often around a couple of rupees a day for a ₹5 lakh sum insured, which works out to roughly ₹650 to ₹700 over a year.

Coverage typically runs from ₹1 lakh at the low end up to ₹1 crore, and the premium climbs as that number does. Someone insuring ₹1 lakh naturally pays less than someone insuring ₹50 lakh, even when the inclusions are otherwise identical.

A handful of things move the price within that band:

• The sum insured you pick
• Whether extras like identity theft cover or IT consultant costs are bundled in
• Whether it’s a standalone policy or a rider attached to something else you already hold

Underwriting for individual policies stays light, since insurers ask for basic personal details rather than a full security audit. That’s largely why premiums remain low compared to business cover.

Premiums for Business Cyber Policies

Business pricing spreads across a much wider range, and it isn’t something you can just estimate.

For a mid-sized company insuring around ₹1 crore of exposure, market pricing currently starts near ₹1,12,000 a year, with the final figure shaped by:

• Turnover
• Business activity
• Geographic spread
• How well the company handles data protection.

That number is a decent anchor, since a business at that coverage level is looking at six figures annually rather than a few thousand rupees.

Smaller businesses pay less. A startup or small business insuring ₹50 lakh to ₹1 crore typically lands somewhere between ₹15,000 and ₹90,000 a year, while larger enterprises with wider digital footprints go well beyond that. Once turnover and risk exposure scale up, premiums can reach several lakhs annually.

Note: These figures shift once underwriting begins, since an insurer only quotes a final premium after reviewing the actual business rather than off a table like this one.

The Rising Demand for Cyber Cover

Cyber cover is no longer a niche purchase. CERT-In, India’s Computer Emergency Response Team, logged close to 29.5 lakh cybersecurity incidents in 2025 alone, and that scale of activity is reshaping how insurers approach the category.

Two forces are pushing demand alongside that number.

• The Digital Personal Data Protection Act has made data-handling compliance a baseline expectation, and insurers may assess an organisation’s data-protection practices when evaluating cyber insurance.
• At the same time, sectors like IT, fintech, banking, NBFCs, e-commerce, and healthcare handle enormous volumes of customer data, raising both their exposure and their appetite for cover.

Healthcare in particular has been flagged as one of the most targeted industries for cyber threats in India, with BFSI and hospitality close behind.

This doesn’t make cyber insurance compulsory, but it does explain why more insurers are competing for this business, which in turn has widened the range of policies on the market.

Factors Behind the Premium Gap

No single factor decides your premium. Insurers weigh several together, and the combination matters more than any one item on its own:

• Sum insured: a higher coverage amount means more potential liability for the insurer
• Industry and data sensitivity: financial or health records priced differently, regardless of business size
• Security posture: firewalls, endpoint detection, multi-factor authentication, regular audits, phishing training for staff
• Claims history: a past incident or prior claim, usually a higher quote next time round
• Regulatory compliance: weak alignment with the Digital Personal Data Protection Act, higher rates or complications after a consent or data security failure
• Deductible: a higher deductible chosen upfront, a lower annual premium in return

How Does the Cyber Insurance Claims Process Work?

A cyber policy is only as useful as the claims process behind it, a part that often gets skipped in comparisons:

• Reporting window: most policies expect the incident to be reported within a set timeframe
• Route depends on claim size: either straight to the insurer, or via a first information report, or an e-complaint on the National Cyber Crime Reporting Portal
• Small claims threshold: up to roughly ₹5,000, often just the e-complaint, no full police report needed
• Documentation the insurer looks at: what happened, what steps were followed, what it cost
• Common reason for rejection: delayed reporting or thin paperwork, making the documentation almost as important as the policy itself

Common Inclusions Worth Knowing

Coverage details vary between insurers, so the policy wording is worth more than the marketing copy, even though most Indian policies still address a similar core set of risks:

• Individual policies typically cover unauthorised online transactions, identity theft, cyberstalking or cyberbullying, legal defence costs for certain cyber disputes
• Business policies typically cover data breach response and notification costs, ransomware and cyber extortion, business interruption from a cyber incident, third-party liability if customers or partners are affected
• Extended cover, depending on the plan: SIM-jacking, card cloning, skimming, damage to computer hardware from a cyber event

Common Exclusions Worth Knowing About

This may not suit every situation, and the exclusions deserve a read before you commit to anything:

• Outdated or unpatched software, where a fix existed and wasn’t applied
• Employee negligence, beyond what the policy specifically defines as covered
• Acts of war or state-sponsored attacks, left out of most standard commercial policies
• Waiting period, the stretch after buying the policy before certain conditions become claimable at all

How Does Cyber Insurance Differ from Other Insurance Types?

It’s a fair question whether a general liability or property policy already covers this ground, but mostly, it doesn’t. Traditional business insurance is built around physical assets and general liability, not digital ones, so cyber-specific losses like data restoration or breach notification costs typically fall outside a standard policy’s wording.

Health and life insurance sit even further away from this risk, since they address medical costs and income loss rather than financial damage from an online attack.

Comparing Cyber Insurance Policies Before You Decide

You have the right to compare more than one policy before deciding, and a cheaper premium isn’t automatically the better deal if the coverage behind it is thin.

A few things worth checking before you settle on anything:

• What the sum insured actually covers against your realistic exposure
• The waiting periods and exclusions written into the policy document
• Whether the claim settlement track record is something you can actually verify
• Whether identity theft cover, legal expense cover or IT consultant costs come included or as paid add-ons
• How the deductible affects both your premium and what you’d pay out of pocket during a claim

IRDAI introduced a circular (Product Structure for Cyber Insurance) in September 2021 to tighten how cyber insurance products are structured. So, if the wording feels dense, run it past an insurance expert before you decide to avoid missing something in the fine print.

Conclusion

Cyber insurance cost in India isn’t a single figure. It depends on whether you’re insuring a personal UPI habit or a company’s customer database and on the sum insured, industry and security measures behind that decision.

Individual cover can start at a few hundred rupees a year, while business cover scales into lakhs as exposure grows. At MyRupia, you can book a free consultation to walk through your options with someone who gives unbiased, straightforward guidance to help you choose the cyber insurance that best fits your needs.