This exists and companies purchase it, ex: https://www.thehartford.com/data-breach-insurance https://www.thehartford.com/data-breach-insurance Risks (all kinds

This exists and companies purchase it, ex: https://www.thehartford.com/data-breach-insurance https://www.thehartford.com/data-breach-insurance Risks (all kinds, not just technical) can be accepted, ignored, transferred and mitigated so it is important to have this option. Its still not a great option for anyone involved as it is hard to price and last I checked had pretty low ceiling on payouts.