How global Cyber Security Insurance works, how Hong Kong businesses can put it into practice, and which insurers can provide such coverage — a one-stop compilation, not selling products.
Cyber risk has evolved from an information technology issue into a compliance obligation, operational risk and financial risk for businesses. This site aspires to be the information hub for cyber security insurance in Hong Kong and globally.
What is happening in Hong Kong, what the regulations require, and where the enterprise gaps lie
Which insurers globally can provide such coverage
From international insurance groups to local virtual insurers, with a focus on enterprise solutions for product comparison.
Regulatory requirements, official statistics, different paths for SMEs and critical infrastructure operators, and a pre-coverage preparation checklist.
The Protection of Critical Infrastructures (Computer Systems) Ordinance came into effect on 1 January 2026; the Personal Data (Privacy) Ordinance requires data users to take practicable steps to safeguard data.
HKCERT recorded 15,877 cyber security incidents in 2025 (up 27% year-on-year); the Office of the Privacy Commissioner recorded 246 data breach notifications (up 21% year-on-year).
Multi-factor authentication, endpoint detection and response, offline backups, staff training — these are conditions for premium reduction and also underwriting thresholds.
AI can serve both as an attack vector (deepfake fraud, automated ransomware) and as an insured risk. The market's approach to AI risk is not uniform.
Some insurers have added AI exclusion clauses, while others include AI-related cyber risk within coverage; standalone AI liability insurance is currently mainly found in the US and Lloyd's markets.
Understand AI risk →Product PositioningOneInfinity proactively includes AI-related cyber risk; Coalition offers AI threat-related coverage; several international groups handle it via exclusion clauses.
View insurers →Daily compilation of AI and cyber risk developments in Hong Kong and globally — regulatory announcements, incident statistics, product and market news, each with source and date.
View all news and developments →
In support of local corporate insurance services: This site is supported by Henderson Insurance Consultants Limited (licensed insurance agent, licence FA-2958), which can provide local Hong Kong corporate insurance arrangements, including comparison of corporate coverage such as cyber insurance and assistance with obtaining cover. The site itself does not sell insurance products, provide quotations or arrange cover, and only offers general information and educational content; for enquiries on specific coverage arrangements, please contact Henderson Insurance Consultants Limited via the contact details in the footer.
Henderson Insurance Consultants Limited (Henderson Insurance Consultants Limited, licensed insurance agent, licence FA-2958) is an appointed insurance agent of Tokio Marine (Tokio Marine Fire and Marine Insurance (Hong Kong) Company Limited), and can assist Hong Kong businesses in arranging its cyber security insurance solutions. Tokio Marine's cyber insurance is provided by the group's specialist cyber underwriting team, with per-policy capacity of up to US$25M (subject to risk profile and policy terms).
Coverage, sub-limits and exclusions vary by risk profile, industry and version; actual coverage is always governed by the policy document issued by Tokio Marine for the specific case. This site is for information and educational purposes only, does not sell insurance products, provide quotations or arrange cover; for coverage arrangements, please contact Henderson Insurance Consultants via the footer contact details.
View insurer comparison →Important Notice:HK.Insure only provides general insurance, cyber security and risk information and educational content, and does not sell insurance products, provide insurance quotations, arrange cover, nor constitute any offer or solicitation. This platform does not evaluate, rank or recommend any insurer or product. Fraud and incident examples are always drawn from official published data, with sources and dates indicated. The coverage, terms, exclusions and claims arrangements of any insurance product are always governed by the policy document issued by the insurer.
