Gleason Insurance Brokers

General Liability · Workers' Comp · Commercial Auto · Pollution Insurance · Surety Bonds Start a Business Insurance Quote Today

A data center aisle at night, locked server racks with status lights and bundled network cabling, an operations room behind glass — manufacturing cyber liability

California commercial insurance

Manufacturing Cyber Insurance CA

844-97-USAVE

For a manufacturer, cyber risk is often measured in hours of lost production, not just stolen records. A ransomware event can shut down an ERP system, stop shipping, or disable access to specifications — even when plant equipment itself is never touched, the financial impact of downtime can be substantial.

  • Production Downtime
  • Ransomware
  • Supply-Chain Dependency

Reviewed by David Gleason, Principal — October 11, 2026

Next Level Experience. Insurance Done Right.

CaliforniaGeneral information only, not legal advice — illustrative scenarios and coverage, subject to change without notice. Content may be out of date or contain errors, and requirements vary by city, county, state, agency, project, contract, carrier and policy, among other factors; verifying what applies to your own situation is your responsibility. Full disclaimer

Interactive coverage guide

Build a coverage stack around how the business actually operates.

Start with the preselected industry or trade, then adjust the operational questions. The commonly considered stack updates live. Keep the coverages you want GIB to evaluate, remove ones you do not want included in your quote request, and add other available lines before continuing.

Common Starting Coverages

Business Owners Policy / Commercial PackageLiability and property components evaluated together

What it is

A Business Owners Policy commonly combines liability and property coverages for eligible businesses. A Commercial Package Policy may combine multiple commercial coverage parts depending on the account and carrier.

Why businesses like yours commonly carry it

Businesses with premises, contents, inventory or other property exposures may ask GIB to evaluate whether liability and property components can be packaged where appropriate.

Possible coverage gap

Eligibility, included coverages and package structure vary by carrier. Commercial Property may also be written separately rather than as part of a package.

Learn more about Business Owners Policy / Commercial Package
Cyber Liability & Data BreachCyber events, data and system interruption

What it is

Cyber insurance may address certain first-party and third-party losses from covered data breaches, cyberattacks, ransomware and system interruption, depending on the policy.

Why businesses like yours commonly carry it

Plants that connect production equipment to office networks can lose output, not just data, when systems are locked.

Possible coverage gap

General Liability generally should not be assumed to address data breach response, ransomware or network interruption.

Learn more about what cyber insurance costs in California

Commonly Added Based on Operations

General LiabilityThird-party injury and property damage

What it is

General Liability commonly addresses covered third-party bodily injury, property damage and certain personal or advertising injury claims, subject to the policy.

Why businesses like yours commonly carry it

Businesses commonly use it as a starting liability policy and to satisfy customer, landlord or contract requirements.

Possible coverage gap

General Liability is not intended to replace policies for employee injuries, business vehicles, owned property, cyber events or professional errors.

Learn more about General Liability
Equipment BreakdownMechanical, electrical and pressure-system breakdown

What it is

Equipment Breakdown may address certain sudden mechanical, electrical or pressure-system breakdown losses, subject to the policy.

Why businesses like yours commonly carry it

Businesses dependent on refrigeration, production, HVAC, electrical or other critical equipment commonly consider it.

Possible coverage gap

Standard property forms may not address every internal mechanical or electrical breakdown.

Learn more about Equipment Breakdown

Exposure-Dependent Coverages

Commercial Crime / FidelityEmployee theft and certain fraud losses

What it is

Commercial Crime may address certain covered theft, fraud and funds-transfer losses, depending on the selected insuring agreements.

Why businesses like yours commonly carry it

Businesses handling money, inventory, payments or account access commonly consider crime coverage.

Possible coverage gap

Property and cyber policies do not necessarily cover every employee theft or social-engineering loss.

Learn more about Commercial Crime / Fidelity
Umbrella / Excess LiabilityAdditional limits above scheduled liability policies

What it is

Umbrella or Excess Liability may provide additional limits above identified underlying liability policies, subject to its own terms and exclusions.

Why businesses like yours commonly carry it

Businesses with larger contracts, vehicles, public exposure or higher severity potential commonly consider additional limits.

Possible coverage gap

An umbrella does not automatically broaden every exclusion or sit over every policy unless the issued terms say it does.

Learn more about Umbrella / Excess Liability

Loading quote and requirements options…

Educational guidance only. Results are not a coverage recommendation, quote, binder, policy interpretation, or guarantee of coverage. Actual needs, availability, forms, limits, exclusions and requirements vary. A licensed insurance professional should review the complete risk and issued policy terms.

Verified Google reviews

What our cyber insurance clients say about us

5.0 / 5from 7 Google reviews

Reviews reflect individual client experiences and are not a guarantee of coverage, pricing or results.

91 Enterprise LLC

91 Enterprise LLC

March 24, 2026

We are using Gleason insurance for our commercial auto policy and GL policy. David is the best insurance broker I've worked with — very honest, responsive, and knowledgeable. Highly recommend.

Fito Plumbers

Fito Plumbers

February 20, 2026

We have been working with David at Gleason Insurance Brokers for 8+ years. David always goes above and beyond to make sure we have the appropriate coverages. He explains everything in detail and makes sure we feel confident and understand all of our policies. He is always available and responds right away!

Barry Stay

Barry Stay

February 17, 2026

David provides great service and I highly recommend him for your insurance needs.

Why Plants and Production Lines Are Being Targeted

California manufacturers should approach cyber insurance as part of operational resilience. The policy needs to address the cost of restoring information systems, the income lost while production or shipping is interrupted, and third-party dependencies across the supply chain.

Manufacturers may hold customer specifications, pricing, employee data, vendor information and proprietary processes — all attractive to attackers even at a business that doesn't think of itself as holding sensitive data.

Cyber risk for a manufacturer is measured in downtime hours, not just records
The policy should address restoration cost and lost production income together
Supply-chain and vendor dependency extend the exposure past the plant itself
Specifications, pricing and proprietary process data are real attacker targets

What a Manufacturing Cyber Policy Can Pay For

Manufacturing businesses rely on ERP, inventory, purchasing, production scheduling and shipping systems. If those systems are unavailable, employees may be unable to produce, package or release goods — network business interruption should be modeled around real production bottlenecks, not generic office downtime.

Modern ransomware events can involve both encryption and theft of files. Extortion, forensics, restoration and privacy response should be reviewed as separate but related coverage components rather than assumed to be one bundled benefit.

Business interruption should be modeled on real production bottlenecks
Extortion, forensics, restoration and privacy response are separate components
ERP and scheduling downtime can stop shipping even with intact equipment
Review each coverage piece individually rather than assuming full overlap

Lost Production, Physical Damage and the Policies Between Them

On a manufacturing account, the biggest cyber number is usually lost production. When ransomware reaches the ERP or spreads from the office network into operational technology, lines stop, orders slip and overtime follows. A cyber policy's business-interruption coverage addresses lost income and extra expense after a waiting period, but only if its definition of a computer system reaches the plant-floor controls as well as office servers.

Physical consequences are where policies divide. Cyber forms often exclude bodily injury and property damage, while property and equipment-breakdown forms may restrict losses caused by a cyber event. A manufacturer whose controllers or machines could be damaged by a compromise should read the cyber, property and equipment-breakdown wording together so a single incident is not left between them.

Lost production is often the largest cyber loss for a plant
Business interruption must reach plant-floor controls, not only IT
Cyber forms often exclude physical damage and bodily injury
Read cyber, property and equipment-breakdown wording together

Where Manufacturing Exposure Lives: OT, ERP and Vendors

A manufacturer can be disrupted when a critical supplier, logistics provider or cloud vendor is attacked. Dependent-business-interruption coverage can be valuable, but policies may restrict the type of provider or require direct dependency — critical vendors should be mapped before selecting limits.

Purchasing and accounts-payable teams routinely process vendor invoices and banking changes, and attackers exploit this workflow directly. Social-engineering and funds-transfer coverage should be coordinated with commercial crime and with the company's own call-back and dual-approval procedures.

A supplier or logistics-provider attack can disrupt production without touching the plant
Map critical vendors before selecting a dependent-business-interruption limit
Purchasing and AP workflows are a direct target for payment fraud
Coordinate social-engineering coverage with internal call-back procedures

California Considerations for Manufacturers

Manufacturers can be subject to California privacy and breach-notification rules when employee, customer or other protected information is involved. Certain larger covered businesses may also fall under California's newer cybersecurity-audit or risk-assessment requirements.

Those obligations should be evaluated separately from insurance — a policy transfers financial consequences, but it doesn't satisfy a compliance requirement on its own.

California breach-notification rules apply when protected information is involved
Phased cybersecurity-audit requirements can apply to larger covered businesses
Compliance obligations are separate from, not satisfied by, insurance
Evaluate applicable rules directly rather than assuming coverage is enough

An Illustrative Ransomware Shutdown at a Plant

Production continues briefly after an ERP ransomware event, but the company can't issue work orders, ship finished goods or invoice customers — a loss where restoration speed matters as much as the extortion response.

In a separate pattern, a critical supplier's systems go down, preventing delivery of a component needed to complete production — a dependent-business-interruption scenario the manufacturer doesn't control directly.

This example is illustrative, not a report of an actual case or a promise of how any real claim would resolve — real outcomes depend on the specific policy, the facts involved, and the carrier's own review. For a situation that's actually happened or is happening, talk to your broker, a licensed attorney, or the relevant regulatory authority directly.

ERP ransomware can stop shipping and invoicing even with production intact
A supplier outage can halt the manufacturer's own production line
Fraudulent bank-change requests target routine purchasing workflows
This is illustrative — real claims depend on the actual policy and facts

Preparing a Manufacturing Cyber Submission

Be ready to explain annual revenue, plant locations, critical systems, OT/IT segmentation, remote-access controls, MFA, EDR, backup architecture, vendor access and prior cyber events.

We place cyber programs for California manufacturers and compare how each carrier defines covered systems, waiting periods and dependent-supplier interruption. Call 844-978-7283 or request a quote with Cyber Liability selected.

For recovery after an attack, see ransomware and cyber insurance.

Document plant locations, critical systems and OT/IT segmentation
Describe remote-access controls, MFA and EDR deployment
Prepare a business-impact analysis if downtime tolerance is low
Request a quote online, or call 844-978-7283

Frequently asked questions

10 questions — start typing to filter

Will cyber security insurance pay for production we lose while systems are down?

That is business interruption cover, and on a manufacturing account it is often the largest part of the loss. It is not automatic: it depends on the waiting period before cover begins, the limit, and whether the policy reaches operational technology on the plant floor as well as office systems. Policies differ substantially here, which is worth confirming before binding rather than after a shutdown.

Why does a manufacturer need cyber insurance if it does not store much consumer data?

Because cyber loss can come from production downtime, ransomware, vendor outages and payment fraud even when consumer data is limited.

Does cyber insurance cover damaged manufacturing equipment?

Often cyber forms exclude physical damage or bodily injury — property and equipment-breakdown coverage should be reviewed for cyber-related exclusions and interaction.

Is ransomware the biggest manufacturing cyber risk?

It is a major exposure, but operational downtime, supply-chain interruption and fraudulent payments can be equally important depending on the operation.

Can dependent-business-interruption coverage protect against a supplier attack?

Potentially, if the supplier and event fit the policy wording — some policies cover only technology providers while broader forms may address certain non-IT dependencies.

What is OT segmentation and why do underwriters care?

Segmentation separates operational technology from other networks to reduce the chance a compromise spreads into production systems — it can be an important underwriting control.

How should a manufacturer choose a business-interruption limit?

Estimate lost gross profit, continuing expenses, extra expense and the time required to restore critical systems and production — a realistic downtime scenario is more useful than a generic limit.

Does cyber insurance cover stolen trade secrets?

Cyber insurance may pay certain incident-response and liability costs associated with an intrusion, but it is not designed to replace the economic value of lost intellectual property.

What information speeds up a manufacturing cyber quote?

A clear description of operations, revenue, locations, security controls, backups, critical systems, OT environment and prior incidents usually makes underwriting more efficient.

Does trucking or logistics dependency change this coverage?

Yes — if shipping and logistics dependency is significant, review it alongside our Transportation Cyber Insurance page for the dependent-carrier angle.

Official resources

Verify current licensing, regulatory and program requirements directly with the responsible agency — this is general information, not legal advice, requirements change without notice, and what is summarized here may be out of date or contain errors. Confirming what applies to your own city, project, contract and policy is your responsibility.

Updated October 11, 2026