Industry pricing
Cyber insurance cost for law firms in 2026
Law firms price at or above the professional services band because privilege, client funds and litigation material sit in the same building.
Updated August 2026. About a 6 minute read. Written by the Cost of Cyber Insurance editorial desk.
Law firms fall inside the professional services band, which averages about 1,197 dollars a year for a small business buying a 1 million dollar aggregate limit, but they usually sit at or above it. A realistic planning figure is 1,200 to 1,600 dollars, against an all industry small business average near 999 dollars.
Three features push firms up. Privileged material has no acceptable disclosure level, many firms hold client money in trust accounts, and litigation practices attract targeted attackers who want the case file rather than the personal data.
Typical annual premium
1,200 to 1,600 dollars a year
Small business, 1 million dollar aggregate limit. Most quotes land between 1,000 dollars and 3,000 dollars.
What drives premiums in this industry
Privilege and confidentiality obligations
A leak of privileged material creates professional consequences that a notification letter cannot fix. Regulators of the profession may become involved alongside privacy regulators, and defence costs run higher as a result.
Client trust accounts
Firms that hold client money are targeted for payment redirection around completion dates. Conveyancing and transactional practices are asked the most detailed questions here, and controls around release of funds directly affect both premium and sublimit.
Matter data retention
Firms keep closed matter files for many years because they are required to. That obligation builds a very large archive, and every archived matter counts toward exposure if the archive is reachable from the live network.
Practice area mix
Corporate, intellectual property and litigation work involving high value disputes attracts more deliberate targeting than volume consumer practice, and pricing follows the mix.
Typical range for a 1 million dollar limit
Small firms commonly land between 1,000 and 3,000 dollars for a 1 million dollar limit. Practices holding client funds, or acting in high value transactional work, sit in the upper part of that range and should consider limits above 1 million.
Across all small businesses buying a 1 million dollar aggregate limit, the market average sits near 999 dollars a year in 2026. Treat every figure on this page as an approximate market average rather than a quote. Individual premiums vary widely because carriers price the same business very differently depending on appetite, claims history and the controls you can evidence.
What underwriters ask about
- Do you hold client money, and what controls sit around releasing it
- How is a change to a client or counterparty bank detail verified before funds move
- Is multifactor authentication enforced for all fee earners and support staff
- How large is your closed matter archive and is it segregated from the live network
- What practice areas make up the largest share of fees
- Do you have a documented incident response plan that accounts for professional reporting duties
- Have you had a mailbox compromise or an attempted payment diversion in the last five years
Payment diversion around completion is the claim carriers see most from law firms. Being able to describe a verification step that does not rely on email will help more than any other single answer.
How to bring the number down
- Verify every bank detail by voice call to a previously held number, and record that you did
- Move the closed matter archive to storage that is not reachable from ordinary user accounts
- Enforce multifactor authentication across the whole firm including partners
- Warn clients in writing at the start of a matter that your bank details will never change by email
Estimate your own premium
Sector averages are a starting point, not a quote. Run your revenue, headcount, record volume, controls and desired limit through the cyber liability insurance cost calculator for a range built around your own business.