Bricking Coverage
Also known as: Cyber Bricking, Hardware Bricking Coverage
Bricking coverage reimburses the cost to replace or restore computer hardware, servers, or IoT and connected devices that a covered cyber event has rendered permanently inoperable. The term comes from equipment being turned into "a brick" — functionally dead — even though it shows no physical damage. This typically happens when malware, ransomware, or a malicious firmware attack corrupts a device so thoroughly that it cannot be re-flashed or restored, forcing a full hardware replacement. It is an extension found in modern cyber liability policies.
For a small-business buyer, this matters because of a coverage gap that trips up many owners: commercial property and equipment breakdown policies generally require direct physical loss, and a bricked device is not physically damaged — its electronics are intact but its software is destroyed. Meanwhile, many base cyber forms pay to restore data but stop short of buying new hardware. Bricking coverage bridges that gap, funding the sometimes substantial cost of replacing routers, point-of-sale terminals, industrial controllers, or a fleet of devices after an attack. Without it, a business could recover its data yet still face a large out-of-pocket bill for the machines to run it on.
A practical nuance: bricking coverage is almost always subject to a sublimit and frequently applies only to hardware owned or leased by the insured that was affected by the same event triggering other cyber coverage. Buyers should confirm whether the coverage pays replacement cost or depreciated value, whether it extends to devices at remote or employee locations, and how it interacts with system failure and business-interruption terms. Because the definition of a "covered cyber event" governs the trigger, it should be read alongside the policy's ransomware and cyber extortion agreements.
Real-world scenario
Cascade Precision Machining, a 40-employee metal-fabrication shop in Ohio, runs 18 CNC controllers and a networked line of programmable logic controllers (PLCs). During a ransomware intrusion, the attacker pushed corrupted firmware to the equipment; even after the network was cleaned, 11 CNC controllers and 6 PLCs would no longer boot. The firmware was overwritten at the chip level, so the devices were physically useless — "bricked" — and had to be replaced rather than reimaged. Cascade carried a standalone cyber liability policy with a $2,000,000 aggregate limit, a $250,000 bricking sublimit, and a $10,000 deductible. Annual premium was $8,400.
The replacement hardware invoice came to $148,000 — $9,800 per CNC controller and $6,700 per PLC. On top of that, the manufacturer charged $22,000 in expedited-shipping and on-site reflashing labor, and Cascade's integrator billed $31,000 to recommission and calibrate the line. Because production stopped for 9 business days, the policy's business income coverage paid a separate $96,000 for lost profit and continuing payroll. The bricking sublimit absorbed the $201,000 hardware-and-labor total; after the $10,000 deductible, the carrier paid $191,000 on that piece.
Had Cascade relied only on its commercial property policy, the claim would have been denied — most property forms exclude damage caused by a cyber event, and firmware corruption is not a covered "physical peril." The all-in loss reached roughly $297,000; the cyber policy paid about $287,000, leaving Cascade its $10,000 deductible out of pocket against an $8,400 premium.
How it affects your premium
Bricking coverage is usually a sublimit inside a cyber liability policy rather than a standalone purchase, so its price moves with a handful of hardware-exposure factors:
- Volume and unit cost of connected hardware — a shop with dozens of $8,000+ CNC controllers or PLCs carries far more replacement exposure than an office of laptops, and underwriters price the sublimit accordingly.
- Sublimit size relative to the aggregate — bumping the bricking sublimit from $100,000 to $500,000 raises premium because the carrier's worst-case hardware payout grows.
- Industry and operational-technology reliance — manufacturing, utilities, and healthcare with embedded/IoT firmware are rated higher than professional-services firms.
- Firmware and patch hygiene — documented patch cadence, network segmentation between IT and OT, and offline firmware backups earn credits.
- Overlap with equipment coverage — buyers who also carry equipment breakdown may negotiate a lower sublimit since some mechanical failure modes sit there instead.
- Deductible/retention level — a higher self-insured retention lowers premium but shifts small bricking events back to the insured.
- Backup and recovery controls — verified, tested restore capability shortens the tail on any bricking event and improves the rate.
Common misconceptions
Myth: My commercial property policy will pay to replace equipment destroyed in a cyberattack.
Reality: Most property forms exclude loss caused by a cyber event and require a tangible physical peril, so firmware corruption is typically denied. Bricking coverage sits inside a cyber liability policy specifically to fill that gap.
Myth: Bricking coverage is the same thing as business interruption after a hack.
Reality: They are separate coverages: bricking pays to replace or restore the physically inoperable hardware, while business interruption insurance pays lost income during the downtime. A serious event often triggers both.
Myth: If the device can be reflashed or reimaged, bricking coverage applies.
Reality: Bricking coverage responds when hardware is rendered permanently unusable and must be replaced; software you can simply restore is generally handled under system failure coverage or data-restoration terms instead.
Frequently asked questions
What exactly does bricking coverage pay for?
Is bricking coverage a standalone policy or part of cyber insurance?
Who needs bricking coverage the most?
How is bricking coverage different from equipment breakdown insurance?
Does bricking coverage cover the data or software on the device?
Sources cited
Need bricking coverage?
Compare quotes from 10+ commercial insurance carriers in 5 minutes. Free, no contact info required.
Get My Quotes →