What Happens If I Report a Data Breach to My Insurer Late?

It can jeopardize your coverage significantly. Most cyber policies are written on a claims-made-and-reported basis, and courts in many jurisdictions treat the reporting deadline as a condition precedent to coverage, meaning a late report can bar coverage even if the insurer suffered no actual prejudice from the delay.

This is distinct from your state’s legal notification deadline for affected individuals, which runs on its own separate clock. Both deadlines matter, and both start as soon as you discover an incident. See What Is First Notice of Loss? and Data Breach Notification Requirements by State.