Are data breaches covered under insurance policies?

In defending against a class action case where patient information was found online for months without being secured, the insurance company was found to have a duty to defend the defendant, who held an insurance policy that covered the publication of patient information. The case, Travelers Indemnity vs. Portal Healthcare, is important because it’s one of the first decisions to rule on whether data breach litigation is covered under commercial insurance policies.