Most cyber insurance conversations focus on data: stolen records, encrypted files, ransom demands. Some attacks go further and leave the equipment itself useless. A laptop that will not boot after a firmware attack, a server wiped past the point of recovery, or a card terminal that no longer responds all have a cost that restoring data does not solve. Bricking coverage is the part of a cyber policy aimed at that cost.
The term comes from the phrase "turned into a brick." A device is bricked when an attack or malicious code leaves it so unusable that it has to be replaced rather than repaired. The target is often the firmware or other low-level software that the hardware needs to start and run, so the device can look physically intact while being impossible to use.
There is no single definition of bricking shared across the insurance and technology industries. Each insurer writes its own, and some avoid the word entirely, calling the coverage computer hardware replacement or something similar. That makes the definition in your policy the first thing to read.
A device that is soft-bricked malfunctions but can be brought back with software work, such as reflashing firmware or restoring a clean image. A hard-bricked device cannot be recovered that way and has to be replaced.
That distinction often decides a claim. Restoring a soft-bricked device may fall under a policy's data restoration or system recovery costs. Paying for new hardware generally requires the bricking or hardware replacement coverage. An insurer may expect a technical assessment showing the device could not reasonably be restored before it pays for a replacement, and some policies reimburse the cost of that assessment.
It seems logical that a commercial property policy would cover a destroyed computer. The difficulty is the trigger. Property forms are built around direct physical loss or damage, and corrupted firmware is not necessarily treated as physical damage, even when the device is worthless afterward.
Cyber policies, on the other hand, have traditionally focused on data, systems and liability rather than the hardware itself. Bricking coverage fills the space between the two. Without it, a business can find that neither policy pays for the new equipment.
When the policy includes it, bricking coverage may reimburse:
Lost income while the equipment is down typically falls under the policy's business interruption section instead, with its own waiting period and limit. A single incident can therefore touch several parts of the policy at once.
Picture a small office that arrives on a Monday to find malware has spread overnight. Twelve workstations will not start, the server holding the scheduling system has been wiped, and the front-desk card terminal is unresponsive. The insurer's forensic vendor works through each device.
Without the bricking piece, the four replacement devices would likely be the business's own cost.
Because there is no standard form, the details that matter vary widely. Compare these points across quotes:
Any business that depends on hardware to operate can be affected, but the impact is sharpest where devices are specialized or expensive. Medical and dental offices rely on imaging equipment and workstations tied to practice software; our Florida dental practice cyber page covers that setting. Restaurants and retailers depend on payment terminals. Accounting and law firms can lose a fleet of laptops in one event just before a deadline.
Size cuts both ways. A large organization has more devices to replace, but a small business with a handful of critical machines can be shut down entirely when those few machines fail.
A bricking claim is easier to document when the groundwork is done in advance:
Replacing equipment first and asking later can create a coverage problem, particularly if the insurer's forensic team never had a chance to confirm the devices could not be restored.
Does ransomware count as bricking?
Not always. Ransomware that encrypts data usually leaves the hardware working once systems are restored or rebuilt. It becomes a bricking event when the attack damages firmware or systems so badly that the devices themselves must be replaced, which is a question the policy's definitions and the forensic findings answer.
Will bricking coverage replace my old laptops with new models?
That depends on the replacement standard in the policy. Ask whether it pays only for equipment of like kind and quality or allows a reasonable upgrade when an identical model is no longer available. Check the wording before assuming the newest model is covered.
Is bricking coverage included in every cyber policy?
No. Some policies include a limited version, some offer it by endorsement, and some do not offer it. Ask for it by name when comparing quotes and confirm the sublimit.
If your business would stop running without a particular set of devices, bricking coverage deserves a line in your cyber review rather than an assumption. Truscott can help you compare how several cyber insurance options define hardware replacement, what sublimits apply, and whether business interruption would respond while new equipment is installed. Bring your hardware inventory to the conversation, since it makes the comparison concrete.
How the regulatory section of a cyber policy pays to defend a regulator's inquiry after a breach, and which fines may be insurable where the law allows.
Cyber InsuranceWhen a cloud or software vendor goes down, dependent business interruption wording decides recovery: the trigger, waiting period, sublimit and exclusions.
