Industries
Cyber insurance cost by industry
What a small business pays for a 1 million dollar cyber liability limit in 2026, broken down by sector, with the exposures that explain the difference.
Across all small businesses buying a 1 million dollar aggregate limit, the market average sits near 999 dollars a year in 2026. Treat every figure on this page as an approximate market average rather than a quote. Individual premiums vary widely because carriers price the same business very differently depending on appetite, claims history and the controls you can evidence.
Industry is one of the strongest single inputs into a cyber quote. It is a proxy for the kind of data you hold, how badly downtime hurts, and how often criminals deliberately choose your sector. The pages below set out what moves the price in each one.
| Industry | Approximate annual average |
|---|---|
| All small businesses | 999 dollars |
| SaaS and technology companies | 1,882 dollars a year |
| Fintech and financial services | 1,365 dollars a year |
| Healthcare organizations | 1,395 dollars a year |
| Ecommerce and retail | 1,073 dollars a year |
| Professional services firms | 1,197 dollars a year |
| Law firms | 1,200 to 1,600 dollars a year |
| Manufacturers | 862 dollars a year |
| Nonprofits | 679 dollars a year |
Industry pricing
SaaS and technology companies
Software companies pay close to double the small business average because a single platform incident can spill into hundreds of customer environments at once.
Approximate average 1,882 dollars a year for a 1 million dollar limit.
Industry pricing
Fintech and financial services
Financial firms are priced for funds transfer fraud first and data breach second, which is the opposite of most other industries.
Approximate average 1,365 dollars a year for a 1 million dollar limit.
Industry pricing
Healthcare organizations
Health data carries the highest notification cost per record of any category, and downtime in a clinical setting has consequences that go beyond revenue.
Approximate average 1,395 dollars a year for a 1 million dollar limit.
Industry pricing
Ecommerce and retail
Retail sits close to the overall average, but the shape of the risk is different: short, sharp revenue loss and payment card obligations rather than long regulatory tails.
Approximate average 1,073 dollars a year for a 1 million dollar limit.
Industry pricing
Professional services firms
Consulting firms hold very little of their own data and a great deal of everybody else's, which is exactly the profile carriers charge a modest load for.
Approximate average 1,197 dollars a year for a 1 million dollar limit.
Industry pricing
Law firms
Law firms price at or above the professional services band because privilege, client funds and litigation material sit in the same building.
Approximate average 1,200 to 1,600 dollars a year for a 1 million dollar limit.
Industry pricing
Manufacturers
Manufacturers hold little personal data, so privacy cost is low. The expensive part of a claim is a production line that stops.
Approximate average 862 dollars a year for a 1 million dollar limit.
Industry pricing
Nonprofits
Nonprofits carry the lowest average cyber premium of any common sector, but donor databases and volunteer access create a distinctive risk profile.
Approximate average 679 dollars a year for a 1 million dollar limit.
Want a figure for your own business rather than a sector average? Use the cyber liability insurance cost calculator.