Start smart. Scale strong. Stay protected.​

  1300 475 092   hello@withpocket.com.au

Cyber Protection Insurance

One email. One click. Your business exposed.

Ransomware. Data breaches. Phishing scams. If you store customer data, process online payments, or use email, you’re a target. Cyber Protection covers the costs when (not if) you’re attacked.

Get a quote
Schedule a free call

What could go wrong

(and why you need this)

Cyber attacks aren’t just for big corporations. Small businesses are easier targets with weaker defences. Here’s what Cyber Protection actually protects you from:

Scenario 1

The ransomware attack

You’re a 6-person marketing agency. An employee clicks a phishing email. Within hours, all your files are encrypted.

A message appears: “Pay $50,000* in Bitcoin or lose everything.” Your backups? Also encrypted. You can’t access client work, contracts, or financial records. Every day you’re offline costs you $3,000* in lost revenue.

What Cyber Protection covers

Ransom negotiation experts, the ransom payment (if recommended), IT forensics to clean your systems, data recovery specialists, lost income while you’re offline, and PR support to manage client communication.

Scenario 2

The data breach

You run an online store with 8,000 customer records. Your website has been hacked, and customer data, including names, addresses, and credit card details, has been stolen. Under Australian privacy law, you are required to notify every affected customer.

You’re facing potential fines from the OAIC (Office of the Australian Information Commissioner), customer lawsuits, and a PR disaster.

What Cyber Protecton covers

Legal costs for privacy law compliance, cost of notifying all customers, credit monitoring services for affected customers, OAIC fines, legal defence against customer claims, PR crisis management, and forensic investigation to find how they got in.

Scenario 3

The fake invoice scam

Your accountant receives an email that appears to be from your regular supplier, requesting an update to their bank details for payment.

The email is fake; it’s a sophisticated phishing attack. You transfer $45,000* to the scammer’s account. By the time you realise, the money’s gone.

What Cyber Protection covers

Investigation costs, legal fees to attempt recovery, and some policies cover part of the stolen funds (depending on policy wording), as well as costs to prevent it from happening again.

Scenario 4

The system failure

A cyberattack hits your cloud-based CRM system. You can’t access customer data for 5 days.

You miss deadlines, lose clients, and your reputation takes a hit. Revenue loss: $15,000*. Client compensation claims: $10,000*.

What Cyber Protection covers

Your lost income during downtime, IT costs to restore systems, legal costs to handle client claims, and compensation payments if you’re contractually liable for missed deadlines due to cyber incidents.

What this actually covers

Cyber attacks aren’t just for big corporations. Small businesses are easier targets with weaker defences. Here’s what Cyber Protection actually protects you from:

Cyber Protection

First-party costs (your business directly)

  • Ransom payments to unlock your systems
  • IT forensics and investigation costs
  • Data recovery and system restoration
  • Lost income while systems are down
  • PR and crisis management
  • Legal costs to comply with privacy laws
  • Customer notification costs (letters, emails, call centre)
  • Credit monitoring services for affected customers

Third-party costs (when others sue you)

  • Legal defence costs when customers sue over data breaches
  • Compensation to affected customers
  • Regulatory fines (OAIC, ACCC, Privacy Commissioner)
  • Breach of contract claims from clients
  • Professional costs (lawyers, forensic experts, privacy consultants)

What's typically covered:

  • Ransomware attacks and extortion
  • Data breaches and theft of customer information
  • Phishing and social engineering fraud
  • Business email compromise (fake invoice scams)
  • Cyber extortion and threats
  • Privacy law violations and regulatory investigations
  • System downtime and business interruption
  • Costs to restore data and systems

What's typically not covered

  • Pre-existing security vulnerabilities you knew about and ignored
  • Intentional illegal acts
  • Physical theft of devices (that’s Business Property insurance)
  • Software licensing disputes
  • General IT maintenance and upgrades
  • Trading losses or stock market impacts

When you need this

By founder stage

Start smart

Pre-launch to first year

You need this from Day 1 if:

  • Store customer data (names, emails, addresses)
  • Take payments online (credit cards, bank transfers)
  • Use cloud systems for business operations (Google Workspace, Xero, CRM)
  • Send and receive emails with clients or suppliers
  • Have a website with login functionality
  • Hold confidential client information

Reality check:
If you’re reading this on a laptop and using email, you need Cyber Protection. It’s not optional anymore.

Typical coverage

$250,000-$500,000 is standard for startups and solo operators.

Scale strong

Growing and hiring

Your cover needs to increase when:

  • You’re storing more customer data (thousands of records, not hundreds)
  • Your revenue exceeds $1M (you’re a more attractive target)
  • You’re taking payments online at scale
  • You’re handling sensitive data (health records, financial info)
  • You’re processing data for EU customers (GDPR compliance)
  • Clients contractually require Cyber insurance

Typical coverage

$1-2 million for growing businesses with significant online operations.

Stay protected

Established and optimising

Review your cover if:

  • You’ve moved more operations to the cloud
  • You’ve had a near-miss (phishing attempt, suspicious login)
  • Your industry has seen high-profile cyber attacks
  • You’re launching new digital products or services
  • You’re expanding internationally (different privacy laws)

Typical coverage

This is where things get custom, and you need to talk to the team at Pocket to evaluate your specific needs. 

Common questions

Founders actually ask

I'm too small to be a target—do I really need this?

Small businesses are actually prime targets. You have valuable data, but weaker security than large corporations. Automated attacks don’t discriminate by size; they hit whoever’s vulnerable. In 2024, 43% of cyber attacks targeted small businesses.