Perhaps a large majority of all businesses are subject to data breach liability whereby someone steals or makes unauthorized use of personal or confidential information, often of customers. Such data breaches have resulted in lawsuits and government sanctions. While most “ISO standard” policies do not cover most types of data breaches, ISO has introduced a number of liability data breach exclusion endorsements.

​