Home › Coverages › Cyber Liability Insurance for Cleaning Companies
Cyber liability insurance for cleaning companies
Cyber liability insurance helps a cleaning company pay for the fallout of a data breach, ransomware attack or network outage, and it can answer claims when employee or client information gets exposed. For janitorial contractors, the data at risk is usually payroll and hiring records for a high-turnover workforce, plus the alarm codes and access lists your crews need to get into clients' buildings.
- Since 2003
- 12+ A-rated carriers
- 28 states
- Independent agents
Start your cleaning business insurance quote
Takes about two minutes. A licensed agent follows up.
Licensed in 28 states · NPN 7642818 · Since 2003
What cyber liability insurance covers for a cleaning business
Cyber liability insurance usually comes in two halves. The first pays your own costs after an attack. The second answers claims from people whose information was exposed.
Your own costs (first-party):
- forensic work to find out what happened and stop it
- notifying employees or clients, and paying for credit monitoring
- restoring payroll, scheduling and billing data
- handling a ransomware demand
- crisis communications
- the income you lose during a network outage
Claims against you (third-party):
- liability when employees' or clients' personal data is exposed
- defense against regulators, and fines where the law allows them to be insured
Why your general liability policy won't handle it
The standard GL form excludes loss of electronic data. ISO's 2014 endorsements, including CG 21 06, go further and exclude claims arising from access to or disclosure of personal or confidential information. Between the two, a breach of your payroll files usually lands outside the policy you show clients on every certificate.
The data a cleaning company actually holds
You may not think of yourself as a data business, but a janitorial company collects a lot:
- Hiring and payroll records. Social Security numbers, copies of I-9 documents, direct-deposit details and background-check results, for current staff and for every person who left. High turnover means that pile grows fast.
- Client access information. Alarm codes, door codes, key assignments and after-hours contact lists, often in a shared spreadsheet or a supervisor's phone.
- Scheduling and inspection apps. Cleaning-management software holds client addresses, building notes and crew assignments. If the vendor has an outage or your login is taken over, ask whether the policy reaches an incident at the vendor that stores your data, and the income you lose while that vendor is down.
- Billing. Your invoices go to property managers who pay by ACH, which makes them a target for payment fraud.
| What cyber insurance may cover | What it may not cover, or only by endorsement |
|---|---|
| Forensics after a hacked email account or office laptop | Money your own staff sends after a spoofed email, without social engineering coverage |
| Notice letters and credit monitoring for current and former employees | A client's payment diverted by someone posing as you, a harder coverage to place |
| Restoring payroll and scheduling data | Upgrading your systems after an attack, unless the policy includes betterment |
| Ransomware response and income lost during an outage | A client's breach blamed on access you held, which may need technology E&O wording |
| Claims and regulatory defense over exposed personal data | Physical theft by your crew from a client's office, which goes to a bond or crime policy |
Cyber incidents at a cleaning company
These examples are fiction, built on common attack patterns.
Example scenario: locked out the night before payroll
On a Thursday night, ransomware encrypts the office PC and the shared drive that hold your payroll files. Those files include Social Security numbers and I-9 copies for 60 current employees and about 300 former ones. Friday's payroll can't run on time. A cyber policy's first-party coverage may pay for forensics, data recovery, notice letters to everyone affected and income lost during the outage.
Example scenario: the bank change that wasn't yours
Someone gets into your email and quietly watches it for weeks. On the first of the month, a property manager receives a message from your real address saying your bank account has changed. Her office pays two months of invoices, $23,600, to the new account. She says it's your problem. Coverage for a client's payment diverted by someone posing as you is harder to find than ordinary social engineering coverage, so ask about it directly.
Example scenario: a supervisor's phone and 25 alarm codes
At 1 a.m., a route supervisor's phone is stolen from his car. It holds a spreadsheet with alarm codes and door codes for 25 client buildings. You have to tell every client, and many will change codes and locks. Cyber may help with the investigation and the notices. Whether it pays your clients' costs to change codes depends on the policy, so ask, and look at lost key coverage for the physical side.
What affects the cost of cyber coverage
We haven't found reliable published cyber prices for cleaning companies, so we quote it from your answers. Carriers usually ask how many records you keep, whether you use multi-factor sign-in on email and payroll, how you back up data, and how staff confirm bank-detail changes. The limits you pick and whether you add social engineering coverage matter too.
Your price depends on the payroll in each class code, your annual sales, the kinds of buildings you clean, how much specialty and chemical work you do, the vehicles your crews drive, your claims history and the limits your contracts require.
Some clients now put cyber in the insurance exhibit. A California public agency's 2026 janitorial RFP for its downtown Los Angeles office asked for $2 million of privacy and cyber liability, next to the usual liability, auto and umbrella limits.
Which cleaning companies need cyber coverage most
Any company with W-2 employees holds data worth protecting. The exposure rises when:
- you keep years of records for former employees, which is common with high turnover
- your supervisors carry client alarm codes and access lists on phones or in shared files, as most office cleaning contractors do
- you clean medical offices and clinics or schools, where clients ask more questions about access and data
- your franchisor supplies the scheduling or billing software, and you need to know who answers for a breach of it; see cleaning franchise insurance
- you get paid by ACH and send supplier payments by wire
Pair cyber with crime coverage so payment fraud is handled under one policy or the other. You can request a cyber quote with your renewal.
State notes on cyber and privacy
Privacy rules differ by state, and two states in our footprint show how they reach cleaning companies:
- Illinois: the Biometric Information Privacy Act requires written notice and a signed written release before you collect fingerprints or scans of face geometry, and it lets anyone aggrieved by a violation sue. Liquidated damages are $5,000 for each intentional or reckless violation and $1,000 for each negligent one, or actual damages if greater. An amendment effective August 2, 2024, made repeated collection of the same biometric from the same person, by the same method, a single violation. If your crews clock in by fingerprint, ask how your cyber policy treats biometric privacy claims. See Illinois.
- California: the public RFP above shows that clients there may ask for cyber limits as part of a cleaning contract. See California.
Check our state pages for the states where you work, and talk to an attorney about notice duties after any breach.
Related coverage
Cyber insurance questions from cleaning company owners
Does a small cleaning company really need cyber insurance?
Does cyber insurance cover a wire I sent to a scammer?
Is cyber insurance for a small business expensive?
Will cyber insurance pay to change a client's alarm codes after a breach?
What should I do first if my office email is hacked?
Ready to see what you'd pay?
Independent agents, 12+ A-rated carriers, and a licensed agent back to you within one business day.