Do you support this bill?

Assembly Bill A1239

2025-2026 Legislative Session

Requires policies covering losses or damages from cyberattacks to include a requirement that the insured notify a law enforcement agency

download bill text pdf

Sponsored By

Current Bill Status - In Assembly Committee

Please enter your contact information

Home address is used to determine the senate district in which you reside. Your support or opposition to this bill is then shared immediately with the senator who represents you.

Optional services from the NY State Senate:

Create an account. An account allows you to officially support or oppose key legislation, sign petitions with a single click, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.

Include a custom message for your Senator? (Optional)

Enter a message to your senator. Many New Yorkers use this to share the reasoning behind their support or opposition to the bill. Others might share a personal anecdote about how the bill would affect them or people they care about.

Actions

2025-A1239 (ACTIVE) - Details

Current Committee:
Assembly Insurance
Law Section:
Insurance Law
Laws Affected:
Add §3114, Ins L
Versions Introduced in 2023-2024 Legislative Session:
A8463

2025-A1239 (ACTIVE) - Summary

Requires policies covering losses or damages from cyberattacks to include a requirement that the insured notify a law enforcement agency before receiving payment for losses or damages suffered as a result of the cyberattack.

2025-A1239 (ACTIVE) - Bill Text download pdf 

                             
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                   1239
 
                        2025-2026 Regular Sessions
 
                           I N  A S S E M B L Y
 
                              January 9, 2025
                                ___________
 
 Introduced  by M. of A. BORES -- read once and referred to the Committee
   on Insurance
 
 AN ACT to amend the insurance law, in  relation  to  requiring  policies
   covering  losses or damages from cyberattacks to include a requirement
   that the insured notify a law enforcement  agency  within  seventy-two
   hours of discovery of the cyberattack

   THE  PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section 1.  Short title. This act shall be known and may be  cited  as
 the "cyber ransom prevention act".
   § 2. The insurance law is amended by adding a new section 3114 to read
 as follows:
   §  3114.  POLICIES  COVERING  CYBERATTACKS. ANY INSURANCE POLICY WHICH
 PROVIDES COVERAGE FOR LOSSES OR DAMAGES SUFFERED  BY  A  CORPORATION  OR
 BUSINESS  ENTITY  FOLLOWING  A CYBERATTACK SHALL REQUIRE THAT THE CORPO-
 RATION OR BUSINESS ENTITY SHALL NOTIFY A LAW ENFORCEMENT AGENCY  OF  THE
 CYBERATTACK BEFORE RECEIVING PAYMENT FOR LOSSES OR DAMAGES SUFFERED AS A
 RESULT OF SUCH CYBERATTACK.
   § 3. This act shall take effect on the one hundred eightieth day after
 it shall have become a law.
 
 
 
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
                                                            LBD02281-01-5

Comments

Open Legislation is a forum for New York State legislation. All comments are subject to review and community moderation is encouraged.

Comments deemed off-topic, commercial, campaign-related, self-promotional; or that contain profanity, hate or toxic speech; or that link to sites outside of the nysenate.gov domain are not permitted, and will not be published. Attempts to intimidate and silence contributors or deliberately deceive the public, including excessive or extraneous posting/posts, or coordinated activity, are prohibited and may result in the temporary or permanent banning of the user. Comment moderation is generally performed Monday through Friday. By contributing or voting you agree to the Terms of Participation and verify you are over 13.

Create an account. An account allows you to sign petitions with a single click, officially support or oppose key legislation, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.