Is your cyberinsurance paid up? Are you sure?

Patterson-Schwartz & Associates, Inc. (PSA) is a real estate firm headquartered in Delaware that reported a data breach in May 2025 after two employee email accounts were compromised in phishing attacks on May 14 and May 29. PSA says the response was rapid, but notification letters to those affected were delayed until 6 November 2025 due to unanticipated issues with its cybersecurity insurance coverage and the work needed to track down contact information.

According to PSA, when the insurance company was alerted, it informed PSA that its policy had lapsed, a consequence of a miscommunication between the insurer and PSA’s broker, and there was a subsequent delay while they negotiated and obtained coverage for the response.

TransUnion was used as the notification vendor to identify potentially exposed individuals, yielding 1,735 people identified, with mailing addresses found for 1,531 and email addresses for a further 34; among those with mailing addresses, two residents were in New Hampshire. The post also notes that the question remains: when was the last time you checked that your cyberinsurance policy was paid up and in force?